Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates (e.g., self-signed), unnecessarily installing it to the Windows Certificate Store of the current user without any restrictions.











This issue affects Cyberduck through 9.1.6 and Mountain Duck through 4.17.5.

CVE-2025-41255 is a high-severity vulnerability identified in iterate GmbH's Cyberduck (up to version 9.1.6) and Mountain Duck (up to version 4.17.5). The core issue stems from improper handling of TLS certificate pinning for untrusted certificates, such as self-signed certificates. Specifically, when these applications encounter untrusted certificates, they incorrectly install these certificates into the Windows Certificate Store of the current user without applying any restrictions or proper validation controls. This behavior constitutes an incorrect privilege assignment (CWE-266), as it grants elevated trust to potentially malicious certificates within the user's certificate store. The vulnerability is exploitable remotely (AV:N) but requires high attack complexity (AC:H) and user interaction (UI:R), with no privileges required (PR:N). The scope is changed (S:C), indicating that exploitation can affect resources beyond the vulnerable component. The impact on confidentiality and integrity is high (C:H/I:H), while availability is not affected (A:N). This means an attacker could leverage this flaw to perform man-in-the-middle (MITM) attacks by injecting malicious certificates trusted by the system, potentially intercepting or altering sensitive data transmitted via TLS connections established by Cyberduck or Mountain Duck. The vulnerability does not currently have known exploits in the wild, and no patches have been linked yet. The issue highlights a critical failure in secure certificate management, undermining the trust model of TLS connections within these widely used file transfer and mounting clients.

Detailed information about CVE-2025-41255: CWE-266: Incorrect Privilege Assignment in iterate GmbH Cyberduck affecting iterate GmbH Cyberduck. Get real-time upd

CVE-2025-41255: CWE-266: Incorrect Privilege Assignment in iterate GmbH Cyberduck - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-41255: CWE-266: Incorrect Privilege Assignment in iterate GmbH Cyberduck

Threats Tagged 'cve-2025-41255'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-41255'

Lead Pen Test Professional