Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

npm @farmfe/core before 1.7.6 is Missing Origin Validation in WebSocket. The development (hot module reloading) server does not validate origin when connecting to a WebSocket client. This allows attackers to surveil developers running Farm who visit their webpage and steal source code that is leaked by the WebSocket server.

CVE-2025-56647 identifies a security vulnerability in the npm package @farmfe/core, specifically versions before 1.7.6. The vulnerability stems from the development server's WebSocket implementation used for hot module reloading, which fails to validate the origin header when establishing WebSocket connections. Normally, origin validation is a critical security control that ensures only trusted web pages can connect to the WebSocket server. Without this validation, an attacker can craft a malicious webpage that, when visited by a developer running the Farm development server, establishes a WebSocket connection to the developer's local server. Through this connection, the attacker can surveil the development environment and potentially exfiltrate source code or other sensitive information transmitted over the WebSocket. The vulnerability impacts confidentiality but does not affect integrity or availability. Exploitation requires the developer to visit a malicious webpage (user interaction) but does not require any authentication or privileges on the development server. The CVSS v3.1 score is 6.5 (medium severity), reflecting the ease of remote exploitation combined with the high confidentiality impact. No known exploits have been reported in the wild as of the publication date. The vulnerability primarily affects development environments rather than production systems, but the risk of intellectual property theft and exposure of proprietary source code is significant. Mitigation involves updating @farmfe/core to version 1.7.6 or later, which includes proper origin validation, and implementing network or firewall rules to restrict WebSocket connections to trusted origins during development.

Detailed information about CVE-2025-56647: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-56647: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-56647: n/a

Threats Tagged 'cve-2025-56647'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-56647'

Lead Pen Test Professional