Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker to escalate privileges by modifying files executed with administrative privileges by a Launch Daemon during system startup.

CVE-2025-5199 is a high-severity vulnerability affecting Canonical Multipass versions up to and including 1.15.1 on macOS. The root cause is incorrect default permissions (CWE-276) on files used by a Launch Daemon that runs with administrative privileges during system startup. This misconfiguration allows a local attacker with limited privileges to modify these files, which are executed with elevated rights, thereby enabling privilege escalation. Specifically, the attacker can replace or alter executable files or scripts that the Launch Daemon runs, causing arbitrary code execution with administrative privileges. The vulnerability requires local access and some user interaction but does not require full administrative rights initially. The CVSS 3.1 score of 7.3 reflects a high impact on confidentiality, integrity, and availability, with low attack complexity but requiring local privileges and user interaction. No known exploits are currently reported in the wild, but the vulnerability presents a significant risk due to the potential for complete system compromise on affected macOS systems running Multipass. Multipass is a tool developed by Canonical to manage lightweight virtual machines, often used by developers and IT professionals for cloud and containerized environments. The vulnerability arises from improper permission settings on critical startup files, a common security misconfiguration that can be exploited to gain unauthorized administrative control.

Detailed information about CVE-2025-5199: CWE-276 Incorrect Default Permissions in Canonical Multipass affecting Canonical Multipass. Get real-time updates, tec

CVE-2025-5199: CWE-276 Incorrect Default Permissions in Canonical Multipass - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-5199: CWE-276 Incorrect Default Permissions in Canonical Multipass

Threats Tagged 'cve-2025-5199'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-5199'

Lead Pen Test Professional