Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability affecting the scanning module in Emsisoft Anti-Malware prior to 2024.12 allows attackers on a remote server to obtain Net-NTLMv2 hash information via a specially created A2S (Emsisoft Custom Scan) extension file.

CVE-2025-29745 is a vulnerability identified in the scanning module of Emsisoft Anti-Malware software versions prior to 2024.12. The flaw allows a remote attacker to exploit the handling of a specially crafted A2S extension file, which is a custom scan file format used by Emsisoft. By leveraging this vulnerability, an attacker controlling a remote server can induce the victim's Emsisoft Anti-Malware product to process the malicious A2S file, resulting in the disclosure of Net-NTLMv2 hash information. Net-NTLMv2 hashes are challenge-response authentication hashes used in Windows network authentication protocols. Exposure of these hashes can enable attackers to perform offline brute-force or relay attacks to impersonate legitimate users or escalate privileges within a network. The vulnerability does not require prior authentication but depends on the victim interacting with or scanning the malicious A2S file, which may be delivered through various vectors such as email, network shares, or compromised websites. No public exploits have been reported yet, and no CVSS score has been assigned. The vulnerability was reserved in March 2025 and published in August 2025, indicating recent discovery and disclosure. The absence of patch links suggests that remediation may still be pending or not widely announced at the time of this report.

Detailed information about CVE-2025-29745: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-29745: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-29745: n/a

Threats Tagged 'cve-2025-29745'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-29745'

Lead Pen Test Professional