Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.5-00.

CVE-2025-66445 is an authorization bypass vulnerability classified under CWE-306 (Missing Authentication for Critical Function) affecting Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer products. These tools are used for data center analytics and IT infrastructure monitoring, providing detailed insights into system performance and operations. The vulnerability exists because certain critical functions within these products lack proper authentication checks, enabling an attacker with low-level privileges to bypass authorization controls and access sensitive data or functionality that should be restricted. The CVSS v3.1 score of 7.1 reflects a high severity, with an attack vector over the network (AV:N), low attack complexity (AC:L), requiring privileges (PR:L) but no user interaction (UI:N). The impact primarily compromises confidentiality (C:H), with limited integrity (I:L) and no availability (A:N) impact. The affected versions include all releases from 10.0.0-00 up to but not including 11.0.5-00. No patches or exploit code are currently publicly available, and no active exploitation has been reported. However, the vulnerability poses a significant risk because it allows unauthorized data access within critical IT analytics environments, potentially exposing sensitive operational data or enabling further lateral movement within enterprise networks. The lack of authentication on critical functions is a fundamental security flaw that could be leveraged by insiders or remote attackers with some access privileges. Given the role of these products in managing and analyzing data center infrastructure, exploitation could undermine trust in monitoring data and lead to information disclosure.

Detailed information about CVE-2025-66445: CWE-306 Missing Authentication for Critical Function in Hitachi Hitachi Infrastructure Analytics Advisor affecting Hi

CVE-2025-66445: CWE-306 Missing Authentication for Critical Function in Hitachi Hitachi Infrastructure Analytics Advisor - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66445: CWE-306 Missing Authentication for Critical Function in Hitachi Hitachi Infrastructure Analytics Advisor

Threats Tagged 'cve-2025-66445'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-66445'

Lead Pen Test Professional