Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

server

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the admin_audit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed in Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1.

CVE-2025-66552 is a vulnerability classified under CWE-778 (Insufficient Logging) affecting Nextcloud Server and Enterprise Server versions prior to 30.0.9 and 31.0.1. The issue arises from incorrect path handling within the groupfolders feature, which causes the admin_audit app to fail in logging all actions performed on files and folders inside groupfolders. This logging deficiency means that certain file operations, such as creation, modification, or deletion, may not be recorded in audit logs, reducing visibility into user activities and potentially allowing malicious or unauthorized actions to go undetected. The vulnerability is exploitable remotely (network vector) by users with low privileges (PR:L), without requiring user interaction (UI:N). The scope is unchanged (S:U), and the impact affects availability of audit logs (A:L) but does not compromise confidentiality or integrity. Although no known exploits are reported in the wild, the lack of comprehensive logging can hinder incident response and forensic investigations, especially in environments where groupfolders are heavily used for collaborative file sharing. The vulnerability is fixed in Nextcloud Server and Enterprise Server versions 30.0.9 and 31.0.1 and later. Organizations relying on Nextcloud for file storage and collaboration should upgrade to these versions to ensure complete audit logging functionality.

Detailed information about CVE-2025-66552: CWE-778: Insufficient Logging in nextcloud security-advisories affecting nextcloud security-advisories. Get real-time

CVE-2025-66552: CWE-778: Insufficient Logging in nextcloud security-advisories - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66552: CWE-778: Insufficient Logging in nextcloud security-advisories

Threats Tagged 'cve-2025-66552'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-66552'

Lead Pen Test Professional