Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information.

CVE-2025-40838 is a medium-severity vulnerability identified in the Ericsson Indoor Connect 8855 device, categorized under CWE-522, which pertains to insufficiently protected credentials. The vulnerability arises due to a design flaw where server-side security controls can be bypassed on the client side. This bypass potentially allows an attacker to gain unauthorized access to sensitive information that should otherwise be protected. The vulnerability does not require user interaction, privileges, or authentication to exploit, and it can be triggered remotely over the network (AV:N). The attack complexity is low (AC:L), meaning exploitation is straightforward without specialized conditions. The CVSS 4.0 vector indicates no impact on confidentiality, integrity, or availability metrics (VC:N/VI:N/VA:N), but the presence of insufficient credential protection implies that sensitive data disclosure is possible, likely through improper storage or transmission of credentials on the client side. The vulnerability affects version 0 of the product, which may indicate an initial or early firmware/software release. No known exploits are currently in the wild, and no patches have been published yet. The Ericsson Indoor Connect 8855 is a small cell or indoor cellular coverage solution, typically deployed in enterprise or public indoor environments to enhance mobile network coverage and capacity. The vulnerability could be exploited by attackers to extract credentials or sensitive configuration data, potentially enabling further network intrusion or unauthorized access to the indoor cellular infrastructure.

Detailed information about CVE-2025-40838: CWE-522 Insufficiently Protected Credentials in Ericsson Indoor Connect 8855 affecting Ericsson Indoor Connect 8855. 

CVE-2025-40838: CWE-522 Insufficiently Protected Credentials in Ericsson Indoor Connect 8855 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-40838: CWE-522 Insufficiently Protected Credentials in Ericsson Indoor Connect 8855

Threats Tagged 'cve-2025-40838'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-40838'

Lead Pen Test Professional