Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to review the stored audio of conversations between associates and Drive Thru customers.

CVE-2025-62646 is a vulnerability identified in the Restaurant Brands International (RBI) assistant platform, which is used to facilitate interactions between associates and Drive Thru customers. The flaw is classified under CWE-669, indicating an incorrect resource transfer between security spheres, meaning that resources (in this case, stored audio files) are accessible beyond their intended security boundaries. Specifically, this vulnerability allows remote attackers who have some level of privileges (PR:L - privileges required) but no user interaction (UI:N) to review stored audio recordings of conversations. The CVSS 3.1 base score is 5.0 (medium severity), with an attack vector of network (AV:N), low attack complexity (AC:L), and a scope change (S:C), indicating that the vulnerability affects resources beyond the initially impacted component. The impact is limited to confidentiality (C:L), with no integrity or availability impact. The vulnerability is present in all versions up to 2025-09-06, with no patches currently listed. No known exploits have been reported in the wild. The exposure of audio recordings can lead to privacy breaches, potentially violating data protection regulations such as GDPR, and may result in reputational harm and loss of customer trust. The vulnerability highlights a failure in enforcing strict access control boundaries between different security domains within the platform, allowing unauthorized access to sensitive audio data.

Detailed information about CVE-2025-62646: CWE-669 Incorrect Resource Transfer Between Spheres in Restaurant Brands International assistant platform affecting R

CVE-2025-62646: CWE-669 Incorrect Resource Transfer Between Spheres in Restaurant Brands International assistant platform - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-62646: CWE-669 Incorrect Resource Transfer Between Spheres in Restaurant Brands International assistant platform

Threats Tagged 'cve-2025-62646'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-62646'

Lead Pen Test Professional