Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which 
could allow an attacker to send GET requests to obtain sensitive device 
information.

CVE-2025-59780 identifies a vulnerability in the embedded web server of the General Industrial Controls Lynx+ Gateway, specifically versions R08, V03, V05, and V18. The core issue is the absence of authentication mechanisms protecting the web server interface, which allows any remote attacker to send unauthenticated HTTP GET requests to the device. These requests can retrieve sensitive information from the device, potentially including configuration details, network settings, or operational data. The vulnerability is categorized under CWE-306, indicating missing authentication for critical functions. The CVSS v3.1 score is 7.5 (high), reflecting the vulnerability’s ease of exploitation (network accessible, no privileges or user interaction required) and its impact on confidentiality, while integrity and availability remain unaffected. The vulnerability was published on November 14, 2025, and no patches or known exploits have been reported yet. The affected product, Lynx+ Gateway, is used in industrial control systems (ICS) environments, where exposure of sensitive device information can aid attackers in reconnaissance and subsequent targeted attacks. The lack of authentication on the embedded web server represents a significant security oversight, especially given the critical nature of industrial control devices. This vulnerability underscores the importance of securing management interfaces in ICS devices to prevent unauthorized access and information leakage.

Detailed information about CVE-2025-59780: CWE-306 in General Industrial Controls Lynx+ Gateway affecting General Industrial Controls Lynx+ Gateway. Get real-ti

CVE-2025-59780: CWE-306 in General Industrial Controls Lynx+ Gateway - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-59780: CWE-306 in General Industrial Controls Lynx+ Gateway

Threats Tagged 'cve-2025-59780'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-59780'

Lead Pen Test Professional