Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service (DoS) conditions on affected devices.

CVE-2025-11044 is a vulnerability classified under CWE-770 (Allocation of Resources Without Limits or Throttling) found in the ANSL-Server component of B&R Industrial Automation GmbH's Automation Runtime product. The flaw exists in versions prior to 6.5 and prior to R4.93. It arises from improper handling of resource allocation, where the system fails to impose limits or throttling on resource requests. An unauthenticated attacker on the network can exploit a race condition to repeatedly allocate resources, overwhelming the system and causing a permanent denial-of-service (DoS) condition. This vulnerability does not require any user interaction or authentication, making it remotely exploitable with low complexity. The CVSS 4.0 base score of 8.9 reflects the vulnerability's high impact on availability and the ease with which it can be exploited. The lack of known exploits in the wild suggests it is either newly discovered or not yet weaponized, but the potential for disruption in industrial environments is significant. The Automation Runtime is widely used in industrial control systems (ICS) and manufacturing automation, where availability is critical. The vulnerability could disrupt production lines, cause safety system failures, or halt critical infrastructure operations. The race condition and resource exhaustion nature of the flaw mean that attackers can cause persistent outages until the system is manually recovered or rebooted. No patches are currently linked, indicating that organizations must monitor vendor advisories closely. Network segmentation, access control, and monitoring for anomalous traffic targeting the ANSL-Server component are essential interim defenses.

Detailed information about CVE-2025-11044: CWE-770 Allocation of Resources Without Limits or Throttling in B&R Industrial Automation GmbH Automation Runtime aff

CVE-2025-11044: CWE-770 Allocation of Resources Without Limits or Throttling in B&R Industrial Automation GmbH Automation Runtime - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11044: CWE-770 Allocation of Resources Without Limits or Throttling in B&R Industrial Automation GmbH Automation Runtime

Threats Tagged 'cve-2025-11044'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-11044'

Lead Pen Test Professional