Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit allow_any/allow_inactive/allow_active settings that allow a local user to escalate their privileges to root.

CVE-2025-53391 is a local privilege escalation vulnerability found in the Debian package zulucrypt_6.2.0-1, specifically related to the zuluPolkit/CMakeLists.txt configuration file. The vulnerability arises from insecure PolicyKit (polkit) settings, namely the allow_any, allow_inactive, and allow_active permissions, which are configured in a way that permits any local user to escalate their privileges to root. PolicyKit is a system service used to define and handle authorizations for privileged operations on Linux systems. Improper configuration of PolicyKit rules can lead to unauthorized privilege escalations. In this case, the zulucrypt package’s PolicyKit rules are overly permissive, allowing local users—without authentication or restrictions—to execute privileged actions. This vulnerability does not require remote access or network interaction; it is exploitable by any local user with access to the affected system. The lack of a CVSS score indicates that the vulnerability is newly published and has not yet been fully assessed or scored. There are no known exploits in the wild at the time of publication, and no patches or mitigation links have been provided yet. The affected versions are not explicitly specified beyond the Debian zulucrypt_6.2.0-1 package, suggesting that this vulnerability is tied to this particular release or configuration. Given that zulucrypt is a disk encryption management tool, the vulnerability could allow attackers to bypass encryption protections by gaining root privileges, potentially exposing sensitive data and system integrity.

Detailed information about CVE-2025-53391: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-53391: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53391: CWE-863 Incorrect Authorization in Debian zulucrypt

Threats Tagged 'cve-2025-53391'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-53391'

Lead Pen Test Professional