Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

CVE-2025-52496 is a vulnerability identified in Mbed TLS, a widely used open-source cryptographic library, specifically affecting versions prior to 3.6.4. The root cause is a race condition in the detection of AESNI (Advanced Encryption Standard New Instructions) capabilities when certain compiler optimizations are applied. This race condition can cause the compiler to remove or modify security-critical code sections, classified under CWE-733, which relates to the removal or modification of security-critical code due to compiler optimizations. The vulnerability manifests in multithreaded programs using Mbed TLS, where the AES key material can be exposed due to improper synchronization during AESNI detection. Additionally, attackers may exploit this flaw to perform Galois/Counter Mode (GCM) forgery attacks, undermining message integrity. The CVSS v3.1 score is 7.8, indicating high severity, with an attack vector limited to local access (AV:L), high attack complexity (AC:H), no privileges required (PR:N), and no user interaction (UI:N). The scope is changed (S:C), meaning the vulnerability affects resources beyond the initially vulnerable component. Confidentiality and integrity impacts are high, while availability is unaffected. No public exploits have been reported yet, but the potential for key extraction and cryptographic forgery poses a serious threat to applications relying on Mbed TLS for secure communications. The vulnerability is particularly relevant for embedded systems, IoT devices, and other multithreaded environments where Mbed TLS is deployed. The lack of patch links suggests that users must monitor official Mbed TLS releases for the fixed version 3.6.4 or later.

Detailed information about CVE-2025-52496: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-52496: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52496: CWE-733 Compiler Optimization Removal or Modification of Security-critical Code in Mbed mbedtls

Threats Tagged 'cve-2025-52496'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-52496'

Lead Pen Test Professional