Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The cross-browser document creation component produced by Digitware System Integration Corporation has a Remote Code Execution vulnerability. If a user visits a malicious website while the component is active, remote attackers can cause the system to download and execute arbitrary programs.

CVE-2025-7620 is a high-severity Remote Code Execution (RCE) vulnerability affecting the cross-browser document creation components developed by Digitware System Integration Corporation (DSIC). The vulnerability is classified under CWE-494, which involves the download of code without integrity verification. This flaw allows an attacker to exploit the component's mechanism for downloading code by injecting malicious payloads. When a user with the vulnerable DSIC component active visits a malicious website, the attacker can cause the system to download and execute arbitrary programs without proper integrity checks. The vulnerability requires no privileges (PR:N) but does require user interaction (UI:R), such as visiting a malicious webpage. The attack vector is network-based (AV:N), meaning the attacker can exploit it remotely over the internet. The vulnerability impacts confidentiality, integrity, and availability, as arbitrary code execution can lead to data theft, system compromise, or denial of service. The affected product is a cross-browser component used for official document creation, which suggests it is integrated into software environments where document processing and creation are critical. The CVSS v3.1 base score is 8.8, indicating a high severity level. No patches or known exploits in the wild have been reported yet, but the vulnerability's nature and ease of exploitation make it a significant threat. The lack of integrity checks during code download is a fundamental security oversight that can be leveraged by attackers to bypass typical security controls and execute malicious code on the victim's machine.

Detailed information about CVE-2025-7620: CWE-494 Download of Code Without Integrity Check in DSIC Cross-browser Components for Official Document Creation affec

CVE-2025-7620: CWE-494 Download of Code Without Integrity Check in DSIC Cross-browser Components for Official Document Creation - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-7620: CWE-494 Download of Code Without Integrity Check in DSIC Cross-browser Components for Official Document Creation

Threats Tagged 'cve-2025-7620'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-7620'

Lead Pen Test Professional