Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

skops

skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode, which can be exploited to access unexpected object fields through dot notation. This can be used to achieve arbitrary code execution at load time. While this issue may seem similar to GHSA-m7f4-hrc6-fwg3, it is actually more severe, as it relies on fewer assumptions about trusted types. This is fixed in version 12.0.0.

CVE-2025-54413 is a high-severity vulnerability affecting the Python library skops, versions prior to 12.0.0. Skops is used to share and ship scikit-learn based machine learning models. The vulnerability arises from an inconsistency in the MethodNode component of the library, specifically related to insufficient type distinction (CWE-351). This flaw allows an attacker to exploit dot notation access to unexpected object fields during model loading, enabling arbitrary code execution at load time. Unlike a superficially similar prior vulnerability (GHSA-m7f4-hrc6-fwg3), this issue is more severe because it requires fewer assumptions about trusted types, broadening the attack surface. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity, with attack vector local (AV:L), low attack complexity (AC:L), no privileges required (PR:N), but user interaction needed (UI:A). The impact on confidentiality, integrity, and availability is high, and the scope is high, meaning the vulnerability can affect components beyond the vulnerable library itself. No known exploits are currently reported in the wild, but the potential for exploitation exists, especially in environments where untrusted or malicious models are loaded. The issue was publicly disclosed on July 26, 2025, and fixed in skops version 12.0.0. Organizations using skops to deploy scikit-learn models should urgently update to the patched version to mitigate this risk.

Detailed information about CVE-2025-54413: CWE-351: Insufficient Type Distinction in skops-dev skops affecting skops-dev skops. Get real-time updates, technical

CVE-2025-54413: CWE-351: Insufficient Type Distinction in skops-dev skops - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-54413: CWE-351: Insufficient Type Distinction in skops-dev skops

skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFuncNode which can be exploited to hide the execution of untrusted operator methods. This can then be used in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types. This is fixed in version 0.12.0.

CVE-2025-54412 is a high-severity vulnerability affecting the Python library skops, specifically versions 0.11.0 and below. Skops is designed to facilitate sharing and shipping of scikit-learn based machine learning models. The vulnerability arises from an inconsistency in the OperatorFuncNode component of skops, which fails to properly distinguish between trusted and untrusted operator methods. This insufficient type distinction (classified under CWE-351) allows an attacker to conceal the execution of malicious operator methods within seemingly safe function calls. By exploiting this flaw, an adversary can perform a code reuse attack, invoking legitimate functions in a misleading manner to escalate privileges and achieve arbitrary code execution. The exploitation requires some user interaction but no prior authentication, and the attack vector is local (AV:L), meaning the attacker must have local access to the system or environment where skops is running. The vulnerability impacts confidentiality, integrity, and availability at a high level due to the potential for arbitrary code execution. The issue has been addressed in skops version 0.12.0, and users are strongly advised to upgrade to this or later versions to mitigate the risk. No known exploits are currently reported in the wild, but the high CVSS score of 8.7 indicates a serious risk if exploited.

Detailed information about CVE-2025-54412: CWE-351: Insufficient Type Distinction in skops-dev skops affecting skops-dev skops. Get real-time updates, technical

CVE-2025-54412: CWE-351: Insufficient Type Distinction in skops-dev skops - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-54412: CWE-351: Insufficient Type Distinction in skops-dev skops


CVE-2025-54413: CWE-351: Insufficient Type Distinction in skops-dev skopsCVE-2025-54413 0 skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode, which can be exploited to access unexpected object fields through dot notation. This can be used to achieve arbitrary code execution at load time. While this issue may seem similar to GHSA-m7f4-hrc6-fwg3, it is actually more severe, as it relies on fewer assumptions about trusted types. This is fixed in version 12.0.0. HighVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-54413 #cwe-351 Join the discussion	CVE Database V5	07/26/2025, 03:29:43 UTC Added: 07/26/2025, 03:47:46 UTC
CVE-2025-54412: CWE-351: Insufficient Type Distinction in skops-dev skopsCVE-2025-54412 0 skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFuncNode which can be exploited to hide the execution of untrusted operator methods. This can then be used in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types. This is fixed in version 0.12.0. HighVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-54412 #cwe-351 Join the discussion	CVE Database V5	07/26/2025, 03:29:10 UTC Added: 07/26/2025, 03:47:46 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional