Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Clevo’s UEFI firmware update packages, including B10717.exe, inadvertently contained private signing keys used for Boot Guard and Boot Policy Manifest verification. The exposure of these keys could allow attackers to sign malicious firmware that appears trusted by affected systems, undermining the integrity of the early boot process.

CVE-2025-11577 is a vulnerability identified in Clevo notebook system firmware, specifically version 1.07.07TRO1, where private cryptographic signing keys used for Intel Boot Guard and Boot Policy Manifest verification were inadvertently embedded within the UEFI firmware update packages (e.g., B10717.exe). These keys are intended to ensure that only firmware images signed by the vendor are trusted and allowed to execute during the early boot process, protecting the system from unauthorized or malicious firmware modifications. The exposure of these private keys effectively breaks the chain of trust, enabling an attacker to sign malicious firmware images that the system will accept as legitimate. This undermines the integrity of the boot process, potentially allowing persistent, stealthy malware to be installed at the firmware level, which is difficult to detect or remove. The vulnerability does not require user interaction or privileges to exploit but typically requires local or physical access to deploy malicious firmware. The CVSS v3.1 score is 7.6 (high), reflecting the critical impact on confidentiality, integrity, and availability, with low attack complexity and no privileges required. Although no known exploits have been reported in the wild, the risk is significant due to the potential for firmware-level compromise that can bypass most security controls. The vulnerability is categorized under CWE-321 (Use of Hard-coded Cryptographic Key), highlighting poor key management practices in the firmware development lifecycle. Clevo has not yet released patches, and no mitigation links are currently available. Organizations relying on Clevo notebooks should be aware of this threat and prepare to apply firmware updates once released.

Detailed information about CVE-2025-11577: CWE-321 Use of Hard‑coded Cryptographic Key in Clevo Notebook System Firmware affecting Clevo Notebook System Firmwar

CVE-2025-11577: CWE-321 Use of Hard‑coded Cryptographic Key in Clevo Notebook System Firmware - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11577: CWE-321 Use of Hard‑coded Cryptographic Key in Clevo Notebook System Firmware

Threats Tagged 'cve-2025-11577'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-11577'

Lead Pen Test Professional