Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity.

CVE-2025-29948 is a vulnerability identified in the AMD Secure Encrypted Virtualization (SEV) firmware of AMD EPYC™ 9005 Series processors. The issue stems from improper handling of overlapping protected memory ranges, classified under CWE-1260, which relates to incorrect management of memory range overlaps leading to security flaws. SEV technology is designed to protect virtual machines by encrypting their memory and enforcing strict access controls via Restricted Memory Protection (RMP). However, this vulnerability allows a malicious hypervisor—an entity with high-level control over the virtualized environment—to bypass RMP protections. By exploiting this flaw, the attacker can undermine the integrity of SEV-SNP guest memory, potentially modifying or corrupting the encrypted memory contents of virtual machines without detection. The vulnerability does not require user interaction and cannot be exploited remotely, as it demands local hypervisor-level privileges. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N) reflects that the attack vector is local, with low complexity, no authentication needed beyond high privileges, and results in a high scope impact on integrity. No patches or known exploits are currently available, emphasizing the need for vigilance and proactive mitigation. This vulnerability is significant in cloud and enterprise environments where AMD EPYC 9005 processors are deployed to host sensitive virtualized workloads, as it threatens the foundational trust model of SEV-based memory encryption.

Detailed information about CVE-2025-29948: CWE-1260  Improper Handling of Overlap Between Protected Memory Ranges in AMD AMD EPYC™ 9005 Series Processors affect

CVE-2025-29948: CWE-1260  Improper Handling of Overlap Between Protected Memory Ranges in AMD AMD EPYC™ 9005 Series Processors - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-29948: CWE-1260  Improper Handling of Overlap Between Protected Memory Ranges in AMD AMD EPYC™ 9005 Series Processors

Threats Tagged 'cve-2025-29948'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-29948'

Lead Pen Test Professional