Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

kdeconnect

kdeconnect-ios

kdeconnect-android

gnome-shell-extension-gsconnect

valent

The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49.

CVE-2025-66270 is a medium-severity authentication bypass vulnerability identified in the KDE Connect protocol, which facilitates seamless integration and communication between desktop and mobile devices. The root cause is the protocol's failure to correlate device IDs consistently across two separate packets during the authentication process. This flaw allows an attacker with network access to spoof device identities, effectively bypassing authentication controls. The affected versions include KDE Connect before 25.12 on desktop, versions before 0.5.4 on iOS, before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49. The vulnerability is classified under CWE-290 (Authentication Bypass by Spoofing). The CVSS v3.1 base score is 4.7, reflecting an attack vector requiring adjacent network access (AV:A), high attack complexity (AC:H), no privileges required (PR:N), and no user interaction (UI:N). The scope is changed (S:C), indicating that the vulnerability affects resources beyond the initially vulnerable component. The impact on confidentiality and integrity is low, with no impact on availability. No public exploits have been reported yet, but the vulnerability's presence in widely used KDE Connect implementations across multiple platforms makes it a relevant concern. The KDE project has not yet published official patches at the time of this report, so users should monitor for updates and apply them promptly once available.

Detailed information about CVE-2025-66270: CWE-290 Authentication Bypass by Spoofing in KDE KDE Connect protocol affecting KDE KDE Connect protocol. Get real-ti

CVE-2025-66270: CWE-290 Authentication Bypass by Spoofing in KDE KDE Connect protocol - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66270: CWE-290 Authentication Bypass by Spoofing in KDE KDE Connect protocol

Threats Tagged 'cve-2025-66270'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-66270'

Lead Pen Test Professional