Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when an App is first created),

CVE-2025-59363 is a high-severity vulnerability affecting One Identity's OneLogin product versions prior to 2025.3.0. The issue stems from an incorrect resource transfer between security spheres, classified under CWE-669. Specifically, the vulnerability allows an attacker with at least low-level privileges (PR:L) to retrieve the OpenID Connect (OIDC) client secret via the GET Apps API v2 endpoint. Normally, the OIDC client secret should only be disclosed once during the initial app creation process to maintain confidentiality. However, due to this flaw, the secret is exposed on subsequent GET requests, increasing the risk of unauthorized access. The vulnerability is remotely exploitable over the network (AV:N) without requiring user interaction (UI:N), and it affects confidentiality (C:H) but does not impact integrity or availability. The scope is changed (S:C), meaning the vulnerability affects resources beyond the initially compromised component. Although no known exploits are currently reported in the wild, the ease of exploitation combined with the sensitive nature of the leaked secret makes this a significant security concern. The OIDC client secret is critical for authentication flows and can be leveraged to impersonate applications or escalate privileges within the identity management environment, potentially leading to unauthorized access to protected resources and services integrated with OneLogin.

Detailed information about CVE-2025-59363: CWE-669 Incorrect Resource Transfer Between Spheres in One Identity OneLogin affecting One Identity OneLogin. Get rea

CVE-2025-59363: CWE-669 Incorrect Resource Transfer Between Spheres in One Identity OneLogin - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-59363: CWE-669 Incorrect Resource Transfer Between Spheres in One Identity OneLogin

Threats Tagged 'cve-2025-59363'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-59363'

Lead Pen Test Professional