Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Ubia camera ecosystem fails to adequately secure API credentials, 
potentially enabling an attacker to connect to backend services. The 
attacker would then be able to gain unauthorized access to available 
cameras, enabling the viewing of live feeds or modification of settings.

CVE-2025-12636 identifies a security vulnerability in the Ubia Ubox Android camera ecosystem, specifically related to the improper safeguarding of API credentials, classified under CWE-522 (Insufficiently Protected Credentials). The vulnerability arises because the system fails to adequately secure API credentials used to authenticate connections to backend services. An attacker who gains limited privileges—such as network access or a low-level authenticated session—can exploit this weakness to connect to the backend services without requiring user interaction. This unauthorized access enables the attacker to view live camera feeds and potentially alter camera settings, compromising the confidentiality and integrity of the surveillance system. The vulnerability affects all versions of the Ubia Ubox Android product as indicated, with no patches currently available. The CVSS v3.1 score is 6.5 (medium severity), reflecting the network attack vector (AV:N), low attack complexity (AC:L), requiring privileges (PR:L), no user interaction (UI:N), unchanged scope (S:U), high confidentiality impact (C:H), and no impact on integrity or availability (I:N/A:N). While no known exploits have been reported in the wild, the vulnerability poses a significant risk to environments relying on these cameras for security monitoring. The lack of credential protection suggests that attackers could extract or reuse API tokens or keys to bypass authentication mechanisms. This vulnerability highlights the importance of secure credential storage, robust authentication, and backend service hardening in IoT and smart device ecosystems.

Detailed information about CVE-2025-12636: CWE-522 in Ubia Ubox affecting Ubia Ubox. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-12636: CWE-522 in Ubia Ubox - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12636: CWE-522 in Ubia Ubox Android

Threats Tagged 'cve-2025-12636'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-12636'

Lead Pen Test Professional