Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

controller

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.

CVE-2025-36017 is a vulnerability classified under CWE-526, which pertains to the storage of sensitive information in an insecure manner. Specifically, IBM Controller versions 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 store sensitive data unencrypted within environment variable files. These files are accessible to users with authentication, meaning that any user with valid credentials can potentially read sensitive information such as credentials, tokens, or configuration secrets. The vulnerability does not require user interaction and can be exploited remotely over the network with low privileges, increasing the risk of unauthorized data disclosure. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) indicates network attack vector, low attack complexity, requiring privileges but no user interaction, with a high impact on confidentiality but no impact on integrity or availability. Although no public exploits are known at this time, the exposure of unencrypted sensitive information can facilitate further attacks such as privilege escalation or lateral movement within an organization’s network. The issue arises from insecure handling of environment variables, which should ideally be encrypted or protected with strict access controls. IBM has not yet published patches but awareness and mitigation are critical to prevent exploitation.

Detailed information about CVE-2025-36017: CWE-526 in IBM Controller affecting IBM Controller. Get real-time updates, technical details, and mitigation strategi

CVE-2025-36017: CWE-526 in IBM Controller - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36017: CWE-526 in IBM Controller

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input.

CVE-2025-36015 is a vulnerability identified in IBM Controller versions 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6. The root cause is improper validation of specified quantity size inputs, categorized under CWE-1284, which deals with improper validation of input quantities. An authenticated user can exploit this flaw by submitting crafted input values that the system does not properly validate, leading to a denial of service (DoS) condition. The vulnerability affects the availability of the system but does not compromise confidentiality or integrity. The CVSS 3.1 base score is 6.5, reflecting a medium severity level, with an attack vector of network (remote), low attack complexity, requiring privileges (authenticated user), no user interaction, and unchanged scope. This means an attacker with valid credentials can remotely cause the system to become unavailable without needing further user involvement. The absence of known exploits in the wild suggests it is not yet actively targeted, but the potential impact on critical business functions remains significant. IBM Controller is widely used in financial consolidation and reporting, so disruption could affect enterprise operations. The lack of available patches at the time of publication necessitates interim mitigations to reduce risk. Monitoring input validation routines and restricting user privileges can help mitigate exploitation until official fixes are released.

Detailed information about CVE-2025-36015: CWE-1284 Improper Validation of Specified Quantity in Input in IBM Controller affecting IBM Controller. Get real-time

CVE-2025-36015: CWE-1284 Improper Validation of Specified Quantity in Input in IBM Controller - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36015: CWE-1284 Improper Validation of Specified Quantity in Input in IBM Controller


CVE-2025-36017: CWE-526 in IBM ControllerCVE-2025-36017 0 IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user. MediumVulnerabilityGermanyUnited KingdomFrance+5#cve #cve-2025-36017 #cwe-526 Join the discussion	CVE Database V5	12/08/2025, 21:37:10 UTC Added: 12/08/2025, 21:45:29 UTC
CVE-2025-36015: CWE-1284 Improper Validation of Specified Quantity in Input in IBM ControllerCVE-2025-36015 0 IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input. MediumVulnerabilityGermanyUnited KingdomFrance+4#cve #cve-2025-36015 #cwe-1284 Join the discussion	CVE Database V5	12/08/2025, 21:22:45 UTC Added: 12/08/2025, 21:30:30 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional