Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.

CVE-2025-0358 is a high-severity vulnerability identified in the AXIS OS, specifically version 12.0.0, developed by Axis Communications AB. The flaw resides in the VAPIX Device Configuration framework, which is part of the device management interface. The vulnerability is classified under CWE-269: Improper Privilege Management, indicating that the system fails to adequately restrict user privileges. During an annual penetration test conducted by Truesec on behalf of Axis Communications, it was discovered that a user with lower privileges could exploit this flaw to escalate their privileges to administrator level without requiring user interaction. The CVSS 3.1 base score of 8.8 reflects the critical nature of this vulnerability, with metrics indicating that the attack vector is local (AV:L), attack complexity is low (AC:L), privileges required are low (PR:L), no user interaction is needed (UI:N), and the scope is changed (S:C). The impact on confidentiality, integrity, and availability is high (C:H/I:H/A:H), meaning an attacker gaining administrator privileges could fully control the device, access sensitive data, modify configurations, or disrupt device operations. AXIS OS is commonly used in network video products such as IP cameras and video encoders, which are often deployed in security and surveillance infrastructures. The vulnerability's exploitation could allow an attacker to manipulate video feeds, disable security monitoring, or use the compromised device as a foothold for further network intrusion. No public exploits are currently known in the wild, and no official patches have been linked yet, indicating that organizations should prioritize monitoring and mitigation efforts proactively.

Detailed information about CVE-2025-0358: CWE-269: Improper Privilege Management in Axis Communications AB AXIS OS affecting Axis Communications AB AXIS OS. Get

CVE-2025-0358: CWE-269: Improper Privilege Management in Axis Communications AB AXIS OS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-0358: CWE-269: Improper Privilege Management in Axis Communications AB AXIS OS

Threats Tagged 'cve-2025-0358'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-0358'

Lead Pen Test Professional