Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The use of a hard-coded encryption key in calls to the Password function in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows a local attacker to decrypt database credentials by reading the cryptographic key from the executable.

This issue affects ImageDirector Capture: from 7.0.9 before 7.6.3.25808.

CVE-2025-58740 is a vulnerability classified under CWE-321, indicating the use of a hard-coded cryptographic key within the Milner ImageDirector Capture software, specifically in the C2SGlobalSettings.dll component on Windows platforms. The affected versions range from 7.0.9 up to but not including 7.6.3.25808. The vulnerability arises because the cryptographic key used in the Password function is embedded directly in the executable, allowing a local attacker with read access to the binary to extract this key. Once obtained, the attacker can decrypt database credentials stored or managed by the application, compromising sensitive authentication material. The vulnerability requires local access with low privileges (PR:L) but does not require user interaction (UI:N) or additional authentication (AT:N). The CVSS 4.0 base score is 8.5, reflecting high severity due to the high impact on confidentiality (VC:H) and availability (VA:H), with limited integrity impact (VI:L). The scope is high (S:H), indicating that exploitation could affect resources beyond the initially vulnerable component. Although no public exploits are known, the presence of hard-coded keys is a critical security flaw that can facilitate privilege escalation or lateral movement within a compromised network. The vulnerability affects organizations using Milner ImageDirector Capture for image and document capture workflows, potentially exposing sensitive database credentials that could be leveraged to access backend systems or data stores.

Detailed information about CVE-2025-58740: CWE-321 Use of Hard-coded Cryptographic Key in Milner ImageDirector Capture affecting Milner ImageDirector Capture. G

CVE-2025-58740: CWE-321 Use of Hard-coded Cryptographic Key in Milner ImageDirector Capture - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-58740: CWE-321 Use of Hard-coded Cryptographic Key in Milner ImageDirector Capture

Threats Tagged 'cve-2025-58740'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-58740'

Lead Pen Test Professional