Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

sudo

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

* sudo: LPE via host option (CVE-2025-32462)

* sudo: LPE via chroot option (CVE-2025-32463)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The sudo utility in Red Hat Enterprise Linux 10 contains two local privilege escalation vulnerabilities: CVE-2025-32462 related to the host option and CVE-2025-32463 related to the chroot option. These vulnerabilities could allow a local user to escalate privileges improperly. Red Hat has released an update for sudo (version 1.9.15-8.p5.el10_0.2) that addresses these issues. The advisory covers multiple architectures including x86_64, s390x, ppc64le, and aarch64. The update is classified as important by Red Hat Product Security. No CVSS score is provided in the advisory, and no known exploits in the wild have been reported.

Detailed information about Red Hat Security Advisory: sudo security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details,

Red Hat Security Advisory: sudo security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:11537

https://access.redhat.com/security/updates/classification/#important

2374692

2374693

Canonical URL

Red Hat Security Advisory: sudo security update

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

CVE-2025-32463 is a critical local privilege escalation vulnerability affecting the Sudo utility versions prior to 1.9.17p1. Sudo is a widely used program on Unix-like operating systems that allows permitted users to execute commands as the superuser or another user. The vulnerability stems from the improper handling of the --chroot option, which causes Sudo to use the /etc/nsswitch.conf file from a directory that can be controlled by a local user. This configuration file influences system name service switch operations, and by substituting it with a malicious version, an attacker can manipulate system behavior during the chroot operation. This leads to the inclusion of functionality from an untrusted control sphere (CWE-829), allowing a local attacker to escalate privileges to root without authentication or user interaction. The vulnerability has a CVSS v3.1 score of 9.3, indicating critical severity with high impact on confidentiality, integrity, and availability. Exploitation requires local access but no privileges, making it particularly dangerous in multi-user environments or where local access is possible through other means. No public exploits have been reported yet, but the vulnerability’s nature and the popularity of Sudo make it a high-value target for attackers. The issue affects Sudo version 1.9.14 and likely other versions before 1.9.17p1, emphasizing the need for timely patching. The lack of a patch link suggests that fixes may be pending or recently released, so monitoring official Sudo project communications is essential.

Detailed information about CVE-2025-32463: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in Sudo project Sudo affecting Sudo project Sudo. Ge

CVE-2025-32463: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in Sudo project Sudo - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-32463: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in Sudo project Sudo


Red Hat Security Advisory: sudo security updateCVE-2025-32462 0 The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: LPE via host option (CVE-2025-32462) * sudo: LPE via chroot option (CVE-2025-32463) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. HighVulnerability#gcve #csaf #cve-2025-32462 Join the discussion	GCVE Database	07/22/2025, 14:28:00 UTC Added: 06/25/2026, 21:47:19 UTC
CVE-2025-32463: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in Sudo project SudoCVE-2025-32463 0 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+12#cve #cve-2025-32463 #cwe-829 Join the discussion	CVE Database V5	06/30/2025, 00:00:00 UTC Added: 06/30/2025, 20:39:32 UTC

Threats Tagged 'cve-2025-32463'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-32463'

Lead Pen Test Professional