Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in 

 Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key.

This issue affects ImageDirector Capture: from 7.0.9.0 before 7.6.3.25808.

CVE-2025-58744 is a vulnerability classified under CWE-1392 (Use of Default Credentials) and CWE-798 (Use of Hard-coded Credentials) affecting Milner's ImageDirector Capture software on Windows platforms. Specifically, the vulnerability resides in the C2SGlobalSettings.dll component, where a hard-coded application encryption key is embedded within the software. This key is used to encrypt and decrypt document archive files managed by ImageDirector Capture versions from 7.0.9.0 up to but not including 7.6.3.25808. Because the encryption key is hard-coded and accessible, an attacker with local access to the system can decrypt sensitive document archives without needing any authentication, user interaction, or elevated privileges. The CVSS 4.0 score of 6.9 reflects a medium severity, with an attack vector classified as local (AV:L), low attack complexity (AC:L), no privileges required (PR:N), and no user interaction (UI:N). The vulnerability impacts confidentiality (VC:H) but does not affect integrity or availability. No patches are currently linked, and no known exploits have been reported in the wild. This vulnerability undermines the confidentiality of sensitive documents stored within the ImageDirector Capture system, potentially exposing proprietary or regulated information to unauthorized parties. Organizations using affected versions should be aware of the risk of data exposure and plan for remediation once patches are available.

Detailed information about CVE-2025-58744: CWE-1392 Use of Default Credentials in Milner ImageDirector Capture affecting Milner ImageDirector Capture. Get real-

CVE-2025-58744: CWE-1392 Use of Default Credentials in Milner ImageDirector Capture - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-58744: CWE-1392 Use of Default Credentials in Milner ImageDirector Capture

Threats Tagged 'cve-2025-58744'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-58744'

Lead Pen Test Professional