Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

yarn

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The patch is identified as 97731871e674bf93bcbf29e9d3258da8685f3076. It is recommended to apply a patch to fix this issue.

CVE-2025-8262 is a vulnerability identified in the yarnpkg Yarn package manager, specifically affecting versions from 1.22.0 through 1.22.22. The issue resides in the function explodeHostedGitFragment within the file src/resolvers/exotics/hosted-git-resolver.js. The vulnerability is characterized by inefficient regular expression complexity, which can be exploited remotely without requiring user interaction or elevated privileges. This inefficiency can lead to excessive CPU consumption when processing crafted input, resulting in a denial-of-service (DoS) condition. The vulnerability has a CVSS 4.0 base score of 5.3, indicating a medium severity level. The attack vector is network-based (AV:N), with low attack complexity (AC:L), no privileges required (PR:L), and no user interaction needed (UI:N). The impact primarily affects availability (VA:L), with no direct confidentiality or integrity impact. The vulnerability does not involve scope changes or other impact categories. A patch has been identified (commit 97731871e674bf93bcbf29e9d3258da8685f3076) to address this issue, and applying this patch is recommended to mitigate the risk. No known exploits are currently reported in the wild. The vulnerability arises from the inefficient handling of regular expressions, which can be triggered by maliciously crafted inputs targeting the hosted-git resolver component, potentially causing resource exhaustion and service disruption in environments using the affected Yarn versions.

Detailed information about CVE-2025-8262: Inefficient Regular Expression Complexity in yarnpkg Yarn affecting yarnpkg Yarn. Get real-time updates, technical det

CVE-2025-8262: Inefficient Regular Expression Complexity in yarnpkg Yarn - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8262: Inefficient Regular Expression Complexity in yarnpkg Yarn

Threats Tagged 'cve-2025-8262'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-8262'

Lead Pen Test Professional