Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior.

CVE-2025-14252 is an Improper Access Control vulnerability identified in the Advantech SUSI driver (susi.sys), affecting versions 5.0.24335 and prior. The SUSI driver is a system-level component that facilitates communication between software and hardware interfaces, commonly used in Advantech embedded and industrial computing platforms. The vulnerability arises because the driver improperly restricts access to critical system resources such as arbitrary memory regions, I/O ports, and model-specific registers (MSRs). An attacker with low-level privileges (local access) can exploit this flaw to perform unauthorized read and write operations on these resources. This capability enables privilege escalation, allowing the attacker to elevate their permissions to kernel or system level, execute arbitrary code with high privileges, and potentially disclose sensitive information from protected memory areas. The CVSS 4.0 base score of 8.5 reflects the high impact on confidentiality, integrity, and availability, combined with relatively low attack complexity and no requirement for user interaction. The vulnerability does not require network access, limiting exploitation to local attackers, but the consequences of a successful attack are severe. No public exploit code or active exploitation has been reported yet, but the nature of the vulnerability makes it a critical concern for environments using Advantech SUSI drivers, especially in industrial control systems and embedded devices where such drivers are prevalent. The lack of available patches at the time of publication necessitates immediate risk mitigation and monitoring.

Detailed information about CVE-2025-14252: Vulnerability in Advantech SUSI affecting Advantech SUSI. Get real-time updates, technical details, and mitigation st

CVE-2025-14252: Vulnerability in Advantech SUSI - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14252: Vulnerability in Advantech SUSI

Threats Tagged 'cve-2025-14252'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14252'

Lead Pen Test Professional