Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

mad-proxy

mad-proxy is a Python-based HTTP/HTTPS proxy server for detection and blocking of malicious web activity using custom security policies. Versions 0.3 and below allow attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic. This issue does not have a fix at the time of publication.

CVE-2025-67485 identifies a protection mechanism failure (CWE-693) in machphy's mad-proxy, a Python-based HTTP/HTTPS proxy server used for detecting and blocking malicious web activity through custom security policies. Versions 0.3 and earlier contain a vulnerability that allows attackers to bypass the proxy's traffic interception rules. This bypass means that HTTP and HTTPS traffic intended to be inspected and filtered by mad-proxy can instead pass through unmonitored, potentially exposing sensitive information such as credentials, session tokens, or confidential data. The vulnerability does not require any authentication or user interaction, and can be exploited remotely over the network (CVSS vector: AV:N/AC:L/PR:N/UI:N). The flaw impacts confidentiality but does not affect integrity or availability. At the time of publication, no patch or fix is available, and no known exploits have been reported in the wild. The vulnerability arises from improper enforcement of security policies within the proxy, allowing certain traffic to circumvent inspection. Organizations relying on mad-proxy for web security monitoring and policy enforcement are at risk of data leakage and reduced visibility into malicious web activity. The medium severity rating (CVSS 5.3) reflects the moderate impact and ease of exploitation without privileges or interaction. This vulnerability highlights the importance of robust proxy security mechanisms and timely patching in security infrastructure components.

Detailed information about CVE-2025-67485: CWE-693: Protection Mechanism Failure in machphy mad-proxy affecting machphy mad-proxy. Get real-time updates, techni

CVE-2025-67485: CWE-693: Protection Mechanism Failure in machphy mad-proxy - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-67485: CWE-693: Protection Mechanism Failure in machphy mad-proxy

Threats Tagged 'cve-2025-67485'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-67485'

Lead Pen Test Professional