Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

CVE-2025-24085 is a critical security vulnerability identified in Apple iOS and iPadOS, characterized as a use-after-free (CWE-416) flaw. This vulnerability arises from improper memory management within the operating system, where a previously freed memory object is accessed, leading to undefined behavior. Exploiting this flaw allows a malicious application to escalate its privileges to kernel level without requiring user interaction or prior authentication, thereby gaining full control over the affected device. The vulnerability impacts iOS versions prior to 17.2, as well as related Apple operating systems including iPadOS, macOS Sequoia, macOS Sonoma, macOS Ventura, tvOS, visionOS, and watchOS, with patches released in their respective 2025 updates (e.g., iOS 18.3, iPadOS 17.7.6). The CVSS v3.1 base score of 10.0 reflects the vulnerability’s critical nature, with attack vector being network-based, no attack complexity, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. Apple has acknowledged reports of active exploitation in the wild targeting versions before iOS 17.2, underscoring the urgency for remediation. The vulnerability’s exploitation can lead to arbitrary code execution at the kernel level, potentially compromising all data and system functions on affected devices. This poses a significant threat to both individual users and organizations relying on Apple mobile platforms for secure communications and operations.

Detailed information about CVE-2025-24085: A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been a

CVE-2025-24085: A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2. in Apple visionOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-24085: A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2. in Apple iOS and iPadOS

Threats Tagged 'cve-2025-24085'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-24085'

Lead Pen Test Professional