Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

agent

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.

This vulnerability (CVE-2026-96293) in WatchGuard Agent version 1.17.24.0000 arises from the cleartext storage of the FileVault Personal Recovery Key in a diagnostic log file that is persistently written and accessible to all local users on macOS systems. An unprivileged local user or process can read this log file to obtain the recovery key, potentially compromising the encrypted disk. The CVSS 4.0 vector indicates local attack vector with low attack complexity, no privileges required, no user interaction, and high impact on confidentiality.

CVE-2026-96293 is a vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS. It involves cleartext storage of sensitive information, specifically the FileVault Personal Recovery Key, in a diagnostic log file that is readable by all local users. This allows a local, unp

CVE-2026-96293: CWE-312 in WatchGuard WatchGuard Agent

A vulnerability was found in xataio Xata Agent up to 0.3.0. It has been classified as problematic. This affects the function GET of the file apps/dbagent/src/app/api/evals/route.ts. The manipulation of the argument passed leads to path traversal. Upgrading to version 0.3.1 is able to address this issue. The patch is named 03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc. It is recommended to upgrade the affected component.

CVE-2025-6283 is a medium-severity path traversal vulnerability affecting the xataio Xata Agent software versions up to 0.3.0. The vulnerability resides in the GET method implementation within the file apps/dbagent/src/app/api/evals/route.ts. Specifically, the flaw allows an attacker with limited privileges (requires low privileges) and network access (attack vector: adjacent network) to manipulate an argument passed to the GET request, resulting in path traversal. This enables unauthorized access to files and directories outside the intended scope of the application. The vulnerability does not require user interaction, and exploitation does not impact integrity or availability but can lead to limited confidentiality loss by exposing sensitive files. The vulnerability is addressed in version 0.3.1 by a patch identified as 03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc. No known exploits are currently reported in the wild. The CVSS 4.0 vector (AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X) indicates the attack requires adjacent network access, low attack complexity, no authentication bypass, and results in a low confidentiality impact without affecting integrity or availability. The vulnerability is classified as problematic but not critical, reflecting the limited scope and impact of exploitation. The Xata Agent is a component used for database-related operations, and path traversal vulnerabilities can lead to exposure of configuration files, credentials, or other sensitive data if exploited successfully. Organizations using affected versions should prioritize upgrading to 0.3.1 to mitigate this risk.

Detailed information about CVE-2025-6283: Path Traversal in xataio Xata Agent affecting xataio Xata Agent. Get real-time updates, technical details, and mitigat

CVE-2025-6283: Path Traversal in xataio Xata Agent - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-6283: Path Traversal in xataio Xata Agent


CVE-2026-96293: CWE-312 in WatchGuard WatchGuard AgentCVE-2026-96293 0 A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users. MediumVulnerability#cve #cve-2026-96293 #cwe-312 Join the discussion	CVE Database V5	10/22/2026, 09:31:48 UTC Added: 10/22/2026, 09:01:05 UTC
CVE-2025-6283: Path Traversal in xataio Xata AgentCVE-2025-6283 0 A vulnerability was found in xataio Xata Agent up to 0.3.0. It has been classified as problematic. This affects the function GET of the file apps/dbagent/src/app/api/evals/route.ts. The manipulation of the argument passed leads to path traversal. Upgrading to version 0.3.1 is able to address this issue. The patch is named 03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc. It is recommended to upgrade the affected component. MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-6283 Join the discussion	CVE Database V5	06/19/2025, 22:31:07 UTC Added: 06/19/2025, 22:46:53 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional