Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

open5gs

A vulnerability was found in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_handle_create_session_response of the file src/sgwc/s5c-handler.c. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The patch is named b19cf6a2dbf5d30811be4488bf059c865bd7d1d2. To fix this issue, it is recommended to deploy a patch.

CVE-2025-15529 is a denial of service vulnerability identified in Open5GS, an open-source 5G core network software suite used for implementing 5G core network functions. The vulnerability resides in the function sgwc_s5c_handle_create_session_response located in the src/sgwc/s5c-handler.c file. This function handles the creation of session responses in the Serving Gateway Control (SGWC) component of the 5G core. An attacker can craft and send specially manipulated messages that trigger a failure condition in this function, causing the Open5GS service to crash or become unresponsive, resulting in denial of service. The vulnerability can be exploited remotely without requiring any authentication or user interaction, making it particularly dangerous in exposed network environments. The issue affects Open5GS versions from 2.7.0 up to and including 2.7.6. The patch identified by commit b19cf6a2dbf5d30811be4488bf059c865bd7d1d2 addresses this flaw by correcting the handling logic in the affected function. Although no active exploitation has been reported in the wild, the public availability of an exploit increases the likelihood of attacks. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and low impact on availability (VA:L), resulting in a base score of 6.9 (medium severity). This vulnerability poses a risk to the availability of 5G core network services relying on Open5GS, potentially disrupting telecom operations and dependent services.

Detailed information about CVE-2025-15529: Denial of Service in Open5GS affecting null Open5GS. Get real-time updates, technical details, and mitigation strateg

CVE-2025-15529: Denial of Service in Open5GS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15529: Denial of Service in Open5GS

Threats Tagged 'cve-2025-15529'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-15529'

Lead Pen Test Professional