Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.

CVE-2025-14376 identifies a critical security flaw in the legacy ADI server component of Rockwell Automation's Verve Asset Manager. The vulnerability is due to the insecure storage of sensitive information—specifically plaintext secrets—in environment variables on the ADI server. Environment variables are often accessible to processes and users with sufficient privileges, and storing secrets in plaintext significantly increases the risk of unauthorized disclosure. The ADI server component has been deprecated and made optional since version 1.36 released in 2024, but versions from 1.33 through 1.41.3 remain affected. The vulnerability requires an attacker to have local access with high privileges (PR:H) and partial authentication (AT:P), but does not require user interaction (UI:N). The CVSS 4.0 vector indicates a local attack vector (AV:L), low attack complexity (AC:L), and high impact on confidentiality, integrity, and availability (all high). This means an attacker with sufficient privileges could extract sensitive secrets, potentially leading to further compromise of the asset manager or connected systems. No public exploits are known yet, but the high severity score reflects the potential damage. The affected product is widely used in industrial environments for asset management, making the vulnerability particularly concerning for operational technology (OT) environments where confidentiality and integrity are critical. The lack of official patches suggests that mitigation relies on configuration changes, component removal, or upgrades to versions that do not include the legacy ADI server.

Detailed information about CVE-2025-14376: CWE-922: Insecure Storage of Sensitive Information in Rockwell Automation Verve Asset Manager affecting Rockwell Auto

CVE-2025-14376: CWE-922: Insecure Storage of Sensitive Information in Rockwell Automation Verve Asset Manager - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14376: CWE-922: Insecure Storage of Sensitive Information in Rockwell Automation Verve Asset Manager

Threats Tagged 'cve-2025-14376'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14376'

Lead Pen Test Professional