Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. This issue has been patched in version 0.29.4.

CVE-2025-62608 is a heap-based buffer overflow vulnerability identified in the mlx array framework, a machine learning library optimized for Apple silicon platforms. The vulnerability resides in the mlx::core::load() function responsible for parsing NumPy .npy files, a common data format in scientific computing and ML workflows. Specifically, when processing a maliciously crafted .npy file, mlx performs an out-of-bounds read of 13 bytes beyond the allocated heap buffer. This flaw is classified under CWE-122 (Heap-based Buffer Overflow). The consequence of this out-of-bounds read is twofold: it can cause the application to crash (denial of service) or leak sensitive memory contents (information disclosure). The vulnerability does not require any privileges, user interaction, or authentication, making it remotely exploitable by simply supplying a crafted file to the vulnerable mlx library. The affected versions are all mlx releases prior to 0.29.4, with the issue resolved in version 0.29.4. The CVSS v4.0 base score is 5.5 (medium severity), reflecting the limited impact scope and lack of integrity or availability compromise beyond crash and information leak. No known exploits have been reported in the wild, but the vulnerability poses a risk to systems that automatically load or process untrusted NumPy files using vulnerable mlx versions on Apple silicon hardware. Given the growing use of Apple silicon in ML environments, this vulnerability could be leveraged in targeted attacks against data science workflows or ML model pipelines.

Detailed information about CVE-2025-62608: CWE-122: Heap-based Buffer Overflow in ml-explore mlx affecting ml-explore mlx. Get real-time updates, technical deta

CVE-2025-62608: CWE-122: Heap-based Buffer Overflow in ml-explore mlx - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-62608: CWE-122: Heap-based Buffer Overflow in ml-explore mlx

Threats Tagged 'cve-2025-62608'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-62608'

Lead Pen Test Professional