Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Cybersecurity AI (CAI) is an open-source framework for building and deploying AI-powered offensive and defensive automation. Versions 0.5.9 and below are vulnerable to Command Injection through the run_ssh_command_with_credentials() function, which is  available to AI agents. Only password and command inputs are escaped in run_ssh_command_with_credentials to prevent shell injection; while username, host and port values are injectable. This issue does not have a fix at the time of publication.

CVE-2025-67511 is a critical command injection vulnerability identified in aliasrobotics' Cybersecurity AI (CAI) framework, specifically affecting versions 0.5.9 and earlier. The vulnerability resides in the run_ssh_command_with_credentials() function, which is designed to execute SSH commands with provided credentials. While the function attempts to escape password and command inputs to prevent shell injection, it fails to properly sanitize the username, host, and port parameters. These inputs are directly incorporated into shell commands without adequate neutralization of special characters, enabling attackers to inject arbitrary shell commands. The vulnerability is classified under CWE-77 (Improper Neutralization of Special Elements used in a Command), indicating that the root cause is insufficient input validation. Exploitation requires user interaction but no prior authentication, increasing the attack surface. Successful exploitation can lead to remote code execution with the privileges of the CAI process, potentially compromising the entire host system. The vulnerability has a CVSS v3.1 score of 9.7 (critical), reflecting its high impact on confidentiality, integrity, and availability, combined with ease of exploitation over the network. At the time of publication, no patches or fixes are available, leaving users exposed. The CAI framework is an open-source tool used for automating offensive and defensive cybersecurity tasks, often integrated into security operations and penetration testing workflows. This makes the vulnerability particularly dangerous, as attackers could leverage it to pivot within networks or disrupt defensive automation. The lack of input sanitization on network-related parameters (username, host, port) is a significant oversight, as these are typically user-controlled or externally sourced values. The vulnerability's scope is broad, affecting all deployments of CAI up to version 0.5.9, and the shared nature of the tool means multiple organizations could be impacted simultaneously. No known exploits have been reported in the wild yet, but the critical severity and public disclosure increase the likelihood of imminent exploitation attempts.

Detailed information about CVE-2025-67511: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') in aliasrobotics cai affe

CVE-2025-67511: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') in aliasrobotics cai - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-67511: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') in aliasrobotics cai

Threats Tagged 'cve-2025-67511'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-67511'

Lead Pen Test Professional