Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized information to the user.

CVE-2025-39204 is a high-severity vulnerability affecting Hitachi Energy's MicroSCADA X SYS600 product, specifically version 10.0. The vulnerability resides in the web interface's filtering query mechanism, which can be malformed to cause unauthorized data leakage. This is classified under CWE-200, indicating an exposure of sensitive information to an unauthorized actor. The flaw allows an attacker with limited privileges (requires low privileges but no user interaction or authentication) to craft specially malformed queries that bypass intended access controls and retrieve sensitive information that should otherwise be restricted. The vulnerability has a CVSS 4.0 base score of 8.5, reflecting its high impact and ease of exploitation. The vector string (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H) indicates network attack vector, low attack complexity, no attack or user interaction required, partial privileges needed, and high confidentiality impact with no integrity or availability impact. The vulnerability affects the confidentiality of sensitive operational data managed by MicroSCADA X SYS600, a critical industrial control system (ICS) platform widely used in energy sector infrastructure for supervisory control and data acquisition. No known exploits are currently in the wild, and no patches have been released yet. The vulnerability's exploitation could allow attackers to gain unauthorized access to sensitive operational data, potentially exposing critical infrastructure information that could be leveraged for further attacks or espionage. Given the critical role of MicroSCADA X in energy management and grid operations, this vulnerability poses a significant risk to the confidentiality of industrial control environments.

Detailed information about CVE-2025-39204: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in Hitachi Energy MicroSCADA X SYS600 affecting Hi

CVE-2025-39204: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in Hitachi Energy MicroSCADA X SYS600 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-39204: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in Hitachi Energy MicroSCADA X SYS600

Threats Tagged 'cve-2025-39204'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-39204'

Lead Pen Test Professional