Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability.  A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site.

CVE-2025-52614 identifies a vulnerability in the HCL Unica Platform, a marketing and customer engagement software suite, where cookies used in HTTPS sessions do not have the 'Secure' attribute set. The 'Secure' attribute instructs browsers to send cookies only over encrypted HTTPS connections, preventing exposure over unencrypted HTTP. Without this attribute, cookies may be transmitted in plaintext if a user accesses the site via HTTP, enabling attackers on the same network or performing man-in-the-middle attacks to intercept session cookies. This vulnerability is classified under CWE-614, which concerns sensitive cookies in HTTPS sessions lacking the 'Secure' flag. The CVSS 3.1 base score is 3.5 (low), reflecting that exploitation requires network access, low attack complexity, privileges, and user interaction, but results in limited confidentiality impact without affecting integrity or availability. The vulnerability affects Unica Platform versions up to 25.1. No public exploits are known, and no patches have been linked yet, indicating this is a recently disclosed issue. Attackers could exploit this by tricking users into clicking crafted links or visiting malicious websites, potentially leading to session hijacking or unauthorized access to user sessions. The vulnerability primarily threatens confidentiality by exposing session tokens, which could lead to unauthorized actions if combined with other weaknesses. However, the requirement for user interaction and privileges reduces the likelihood of widespread exploitation.

Detailed information about CVE-2025-52614: CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in HCL Software Unica Platform affecting HCL Sof

CVE-2025-52614: CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in HCL Software Unica Platform - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52614: CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in HCL Software Unica Platform

Threats Tagged 'cve-2025-52614'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-52614'

Lead Pen Test Professional