Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 through 25.1.*. An incomplete configuration (agent authentication) in DriveLock tenant allows attackers to impersonate any DriveLock agent on the network against the DES (DriveLock Enterprise Service).

CVE-2025-67791 is a critical authentication bypass vulnerability affecting DriveLock endpoint security software versions 24.1 through 25.1. The root cause is an incomplete configuration related to agent authentication within the DriveLock tenant environment, specifically impacting the DriveLock Enterprise Service (DES). This flaw allows attackers on the same network to impersonate any DriveLock agent without requiring authentication, effectively bypassing security controls designed to validate agent identity. The vulnerability is classified under CWE-287 (Improper Authentication). With a CVSS 3.1 base score of 9.8, the attack vector is network-based (AV:N), requires no privileges (PR:N), no user interaction (UI:N), and affects confidentiality, integrity, and availability (C:H/I:H/A:H). Exploiting this vulnerability enables attackers to intercept, manipulate, or disrupt endpoint security communications, potentially disabling protections or injecting malicious commands. Although no known exploits are reported in the wild yet, the critical severity and ease of exploitation make it a high priority for remediation. The vulnerability affects multiple DriveLock versions, indicating a systemic issue in the authentication mechanism of the DES component. Organizations relying on DriveLock for endpoint protection must urgently assess their configurations and monitor for suspicious agent activity to prevent compromise.

Detailed information about CVE-2025-67791: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-67791: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-67791: n/a

Threats Tagged 'cve-2025-67791'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-67791'

Lead Pen Test Professional