Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, when a victim changes the email address that they have configured. To exploit this, an attacker would create their own account and perform an SSO login. The root cause of the issue is SSO misconfiguration.

CVE-2025-54599 is a security vulnerability affecting the Bevy Event service, which is utilized for managing eBay Seller Events and other related activities. The vulnerability arises from a misconfiguration in the Single Sign-On (SSO) implementation. Specifically, when a user who has authenticated via SSO changes the email address configured in their account, an attacker can exploit this flaw to take over the victim's account. The attack scenario involves the adversary first creating their own account and performing an SSO login. Due to the misconfiguration, the system fails to properly validate or segregate the identity changes tied to the email address, allowing the attacker to hijack the victim's session or account. This vulnerability is significant because it undermines the trust model of SSO, which is designed to streamline authentication while maintaining security. The lack of a CVSS score indicates that the vulnerability is newly published and has not yet been fully assessed or exploited in the wild. However, the root cause being an SSO misconfiguration suggests a logical flaw in the authentication flow rather than a traditional software bug, which can be more challenging to detect and mitigate. The affected versions are not explicitly specified, but the vulnerability is noted to exist through July 22, 2025, implying that any deployments of the Bevy Event service prior to that date may be vulnerable. No known exploits have been reported in the wild as of the publication date. The vulnerability's exploitation requires the attacker to create an account and perform an SSO login, which means no prior access to the victim's credentials is needed, but some level of user interaction or account creation is necessary.

Detailed information about CVE-2025-54599: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-54599: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-54599: n/a

Threats Tagged 'cve-2025-54599'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-54599'

Lead Pen Test Professional