Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

universal-gateway

CVE-2025-7203 is a vulnerability in WSO2 Universal Gateway where sensitive information such as remote log server credentials, truststore passwords, and keystore passwords are stored in cleartext. This exposure occurs in the Management Console and product files when the remote logging feature is enabled. An attacker with administrative access or direct file access can retrieve these credentials, potentially compromising the integrity and confidentiality of the remote log server. The vulnerability has a medium severity with a CVSS score of 4.9.

The vulnerability CVE-2025-7203 in WSO2 Universal Gateway involves cleartext storage of sensitive information including remote log server credentials, truststore passwords, and keystore passwords. This occurs because the system does not adequately protect or obscure these credentials when remote logging is enabled. An attacker with administrative access to the Management Console or direct access to product files can extract these credentials, enabling potential manipulation of log entries and compromising the confidentiality and integrity of the remote log server. The CVSS v3.1 score is 4.9 (medium severity), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and impact on confidentiality but not integrity or availability.

CVE-2025-7203 is a vulnerability in WSO2 Universal Gateway where sensitive information such as remote log server credentials, truststore passwords, and keystore passwords are stored in cleartext. This exposure occurs in the Management Console and product files when the remote logging feature is enab

CVE-2025-7203: CWE-312: Cleartext Storage of Sensitive Information in WSO2 WSO2 Universal Gateway

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional