Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

CIRCL OSINT Feed

ThreatFox MISP Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password.

CVE-2025-20999 is a medium-severity vulnerability classified under CWE-285 (Improper Authorization) affecting Samsung Mobile Devices, specifically Galaxy Tablets prior to the SMR (Security Maintenance Release) July 2025 Release 1. The vulnerability allows secondary users on the device to access the owner's saved Wi-Fi passwords without proper authorization. This occurs due to insufficient access control mechanisms protecting sensitive Wi-Fi credential data. The CVSS 3.1 base score is 4.1, reflecting a vulnerability that requires local access (AV:P - physical or local access), low attack complexity (AC:L), and low privileges (PR:L) but does require user interaction (UI:R). The impact is primarily on confidentiality (C:H), with no direct impact on integrity or availability. The vulnerability does not appear to have known exploits in the wild yet, and no patches or updates are currently linked, indicating that remediation may be pending or forthcoming in the July 2025 SMR update. The flaw allows unauthorized disclosure of Wi-Fi credentials, which could lead to further network access or lateral movement if exploited by malicious secondary users or attackers with physical access to the device. This vulnerability highlights a failure in enforcing proper authorization checks when accessing sensitive stored credentials on multi-user capable devices.

Detailed information about CVE-2025-20999: CWE-285: Improper Authorization in Samsung Mobile Samsung Mobile Devices affecting Samsung Mobile Samsung Mobile Devi

CVE-2025-20999: CWE-285: Improper Authorization in Samsung Mobile Samsung Mobile Devices - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-20999: CWE-285: Improper Authorization in Samsung Mobile Samsung Mobile Devices

Threats Tagged 'cve-2025-20999'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-20999'

Lead Pen Test Professional