Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

Bleeping Computer

GCVE Database

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

E3 Site Supervisor Control (firmware version < 2.31F01) generates the root linux password on each boot. An attacker can generate the root linux password for a vulnerable device based on known or easy to fetch parameters.

CVE-2025-52549 is a critical vulnerability affecting Copeland LP's E3 Supervisory Control system, specifically firmware versions prior to 2.31F01. The vulnerability arises from the insufficient protection of credentials (CWE-522), where the root Linux password is generated deterministically on each device boot using parameters that are either publicly known or easily obtainable by an attacker. This means that an attacker with network access or other means to gather these parameters can predict or compute the root password without needing prior authentication or user interaction. The root password grants full administrative privileges on the device, allowing an attacker to execute arbitrary commands, manipulate system configurations, disrupt operations, or pivot to other parts of the network. The CVSS 4.0 base score of 9.2 reflects the high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vulnerability does not currently have known exploits in the wild but poses a significant risk due to the critical nature of supervisory control systems in industrial environments. The lack of a patch link suggests that a fix may not yet be publicly available, increasing the urgency for mitigation.

Detailed information about CVE-2025-52549: CWE-522 Insufficiently Protected Credentials in Copeland LP E3 Supervisory Control affecting Copeland LP E3 Superviso

CVE-2025-52549: CWE-522 Insufficiently Protected Credentials in Copeland LP E3 Supervisory Control - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52549: CWE-522 Insufficiently Protected Credentials in Copeland LP E3 Supervisory Control

Threats Tagged 'cve-2025-52549'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-52549'

Lead Pen Test Professional