Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles.

CVE-2025-21035 is a medium-severity vulnerability classified under CWE-284 (Improper Access Control) affecting the Samsung Calendar application on Samsung mobile devices running Android 14 (versions prior to 12.5.06.5) and Android 15 (versions prior to 12.6.01.12). The vulnerability allows a physical attacker with direct access to the device to bypass access control mechanisms and access calendar data across multiple user profiles. This means that an attacker who can physically interact with the device can view sensitive calendar information belonging to other users configured on the same device, potentially exposing confidential scheduling, appointments, or other personal data. The CVSS 3.1 base score is 4.6, indicating a medium severity level, with the vector AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. This reflects that the attack requires physical access (AV:P), has low attack complexity (AC:L), requires no privileges (PR:N) or user interaction (UI:N), and impacts confidentiality (C:H) but not integrity or availability. No known exploits are currently reported in the wild, and no patches or updates are linked in the provided data, though presumably Samsung will release fixes in the affected versions. The vulnerability highlights a failure in enforcing proper access control boundaries between user profiles within the Samsung Calendar app, which is critical in multi-user environments or shared devices. Given the nature of the vulnerability, remote exploitation is not possible, and the threat is limited to attackers with physical device access. However, the exposure of sensitive calendar data can have privacy and operational security implications for affected users.

Detailed information about CVE-2025-21035: CWE-284: Improper Access Control in Samsung Mobile Samsung Calendar affecting Samsung Mobile Samsung Calendar. Get re

CVE-2025-21035: CWE-284: Improper Access Control in Samsung Mobile Samsung Calendar - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-21035: CWE-284: Improper Access Control in Samsung Mobile Samsung Calendar

Threats Tagged 'cve-2025-21035'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-21035'

Lead Pen Test Professional