Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An unpatched zero-day vulnerability dubbed StyleSmuggler affects all current versions of Magento and Adobe Commerce, including 2.4.9, enabling unauthenticated remote code execution. Active exploitation began on September 4th, 2026. The attack operates in two stages: injecting malicious PHP code into Magento's template system using styles properties to evade safeguards, then executing the poisoned code via failed payment emails. Upon successful compromise, attackers deploy a Rust-based backdoor disguised as legitimate system processes (kworker, fc-cache, or chronyd) that connects to command and control servers. The backdoor uses NTP-shaped UDP traffic for C2 communication to evade detection. A second unrelated attacker has also been observed exploiting the same vulnerability to deploy PHP web shells. Affected merchants should deploy immediate mitigation measures, scan for compromise, and temporarily disable GraphQL until an official patch is released.

CVE-2025-54236 is an Improper Input Validation vulnerability (CWE-20) affecting multiple versions of Adobe Commerce, including 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, and 2.4.4-p15 and earlier. The vulnerability arises because the application fails to properly validate input data, which can be manipulated by an attacker to hijack legitimate user sessions. This session takeover allows attackers to impersonate users, gaining unauthorized access to sensitive information and potentially modifying data, thus impacting confidentiality and integrity at a high level. The vulnerability is remotely exploitable over the network without requiring authentication or user interaction, increasing its risk profile. Adobe has assigned a CVSS v3.1 base score of 9.1, categorizing it as critical. No public exploits have been reported yet, but the ease of exploitation and the severity of impact make it a significant threat. The vulnerability affects a widely used e-commerce platform, which is integral to many online retail operations globally, making it a high-value target for attackers. The lack of available patches at the time of disclosure necessitates immediate attention to mitigation strategies.

Detailed information about CVE-2025-54236: Improper Input Validation (CWE-20) in Adobe Adobe Commerce affecting Adobe Adobe Commerce. Get real-time updates, tec

CVE-2025-54236: Improper Input Validation (CWE-20) in Adobe Adobe Commerce - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-54236: Improper Input Validation (CWE-20) in Adobe Adobe Commerce

Threats Tagged 'cve-2025-54236'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-54236'

Lead Pen Test Professional