Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Collision in MiniFilter driver in Avast Software Avast Free Antivirus  before 25.9  on Windows allows a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms.

CVE-2025-10905 is a vulnerability identified in the MiniFilter driver component of Avast Free Antivirus for Windows versions prior to 25.9. The MiniFilter driver is responsible for filtering and monitoring file system operations to provide real-time protection. The vulnerability is classified under CWE-693, which relates to protection mechanism failures. Specifically, a collision in the MiniFilter driver allows a local attacker who already possesses administrative privileges on the affected system to disable Avast's real-time protection and self-defense features. This effectively removes critical layers of defense, potentially allowing malware or unauthorized processes to execute without interference from the antivirus software. The attack vector requires local access with high privileges (administrative rights), and no user interaction is necessary to exploit the flaw. The CVSS v3.1 base score is 4.4, reflecting a medium severity primarily due to the requirement for administrative privileges and the lack of impact on confidentiality or integrity directly. The vulnerability affects availability by disabling protection mechanisms, increasing the risk of successful malware infections or persistence. No public exploits have been reported, and no official patches have been linked at the time of publication, though it is expected that Avast will release updates to address this issue. This vulnerability highlights a failure in the protection mechanism designed to safeguard the antivirus software itself, which is critical for maintaining endpoint security integrity.

Detailed information about CVE-2025-10905: CWE-693 Protection Mechanism Failure in Avast Free Antivirus affecting Avast Free Antivirus. Get real-time updates, t

CVE-2025-10905: CWE-693 Protection Mechanism Failure in Avast Free Antivirus - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-10905: CWE-693 Protection Mechanism Failure in Avast Free Antivirus

Threats Tagged 'cve-2025-10905'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-10905'

Lead Pen Test Professional