Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ollama

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.

CVE-2025-63389 identifies a critical authentication bypass vulnerability in the Ollama platform, specifically affecting API endpoints in versions up to and including v0.12.3. The vulnerability arises because multiple API endpoints are exposed without requiring any form of authentication, allowing remote attackers to perform unauthorized operations related to model management. This includes potentially creating, modifying, or deleting AI models managed by the platform. The vulnerability is classified under CWE-306 (Missing Authentication for Critical Function), highlighting the absence of proper access controls. The CVSS v3.1 base score of 9.8 reflects the vulnerability's ease of exploitation (no privileges or user interaction required), network attack vector, and the critical impact on confidentiality, integrity, and availability of the system. The lack of authentication means attackers can remotely manipulate AI models, potentially leading to data leakage, model poisoning, or denial of service. While no public exploits have been reported yet, the critical nature of the flaw and the increasing reliance on AI platforms make this a high-risk issue. The vulnerability was reserved in late October 2025 and published in mid-December 2025, with no patch links currently available, indicating that remediation may still be pending or in development.

Detailed information about CVE-2025-63389: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-63389: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-63389: n/a

Threats Tagged 'cve-2025-63389'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-63389'

Lead Pen Test Professional