Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Migration Toolkit for Containers (MTC) enables you to migrate
Kubernetes resources, persistent volume data, and internal container images
between OpenShift Container Platform clusters, using the MTC web console or
the Kubernetes API.

The vulnerability CVE-2025-7783 affects the Red Hat Migration Toolkit for Containers (MTC), which enables migration of Kubernetes resources, persistent volume data, and container images between OpenShift clusters. The root cause is an interpretation conflict in the node-forge library used for cryptographic operations. Specifically, attackers can craft malicious ASN.1 structures that desynchronize schema validations, resulting in bypassing cryptographic verifications and security decisions. This flaw impacts multiple Red Hat products that incorporate node-forge. Red Hat has issued a security advisory (RHSA-2026:41928) with an updated MTC version that fixes this vulnerability. The advisory references multiple related CVEs and bug reports. No active exploitation has been observed.

Detailed information about Red Hat Security Advisory: Red Hat build of Cryostat 4.0.2: new RHEL 9 container image security update affecting Red Hat Product Secu

Red Hat Security Advisory: Red Hat build of Cryostat 4.0.2: new RHEL 9 container image security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:41928

https://access.redhat.com/security/cve/CVE-2025-12816

https://access.redhat.com/security/cve/CVE-2025-13465

https://access.redhat.com/security/cve/CVE-2025-15284

https://access.redhat.com/security/cve/CVE-2025-52881

https://access.redhat.com/security/cve/CVE-2025-58183

https://access.redhat.com/security/cve/CVE-2025-58754

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-61729

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-66031

https://access.redhat.com/security/cve/CVE-2025-66418

https://access.redhat.com/security/cve/CVE-2025-66471

https://access.redhat.com/security/cve/CVE-2025-66506

https://access.redhat.com/security/cve/CVE-2025-68121

https://access.redhat.com/security/cve/CVE-2025-69223

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2025-7783

https://access.redhat.com/security/cve/CVE-2026-12143

https://access.redhat.com/errata/RHSA-2025:17501

https://access.redhat.com/security/cve/CVE-2025-10725

https://access.redhat.com/security/cve/CVE-2025-55163

https://access.redhat.com/security/cve/CVE-2025-57852

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/red_hat_openshift_ai/

Canonical URL

https://access.redhat.com/errata/RHSA-2025:14886

https://access.redhat.com/security/updates/classification

https://access.redhat.com/errata/RHSA-2025:14919

https://access.redhat.com/security/updates/classification/#important

2381959

2385773

2388252

https://access.redhat.com/errata/RHSA-2025:15771

https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.8/html-single/release_notes/index#about-this-release-484_release-notes-48

https://access.redhat.com/errata/RHSA-2025:20047

https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh

https://developers.redhat.com/rhdh/overview

https://docs.redhat.com/en/documentation/red_hat_developer_hub

https://issues.redhat.com/browse/RHDHPLAN-234

https://issues.redhat.com/browse/RHIDP-8047

https://issues.redhat.com/browse/RHIDP-8057

https://access.redhat.com/errata/RHSA-2025:16918

https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.7/html-single/release_notes/index#about-release-477_release-notes-47

Red Hat Security Advisory: Red Hat Migration Toolkit for Containers

A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled, allowing an unauthenticated, malicious attacker to jeopardize the environment.

CVE-2025-8415 is an authentication bypass vulnerability discovered in the Cryostat HTTP API component of Red Hat Cryostat 4 running on Red Hat Enterprise Linux 9. Cryostat is a Java profiling and monitoring tool used primarily for managing and analyzing Java Flight Recorder data. The vulnerability arises because the Cryostat HTTP API binds to all network interfaces by default, rather than restricting itself to localhost or specific trusted interfaces. If network policies such as firewall rules or Kubernetes Network Policies are disabled or misconfigured, this default binding exposes the API port externally. An attacker with network access to this exposed port can bypass authentication mechanisms due to improper validation of alternate names or host headers, gaining unauthorized access to the API. This access can allow the attacker to manipulate monitoring data, potentially extract sensitive information, or interfere with the profiling environment, thereby compromising confidentiality and integrity. The CVSS v3.1 score of 5.9 reflects a medium severity, considering that the attack vector is network-based but requires high privileges and no user interaction. No public exploits have been reported yet, but the exposure risk is significant in environments lacking proper network segmentation or access controls. The vulnerability highlights the importance of secure default configurations and strict network policies for management APIs in enterprise environments.

Detailed information about CVE-2025-8415: Authentication Bypass by Alternate Name in Red Hat Cryostat 4 affecting Red Hat Cryostat 4. Get real-time updates, tec

CVE-2025-8415: Authentication Bypass by Alternate Name in Red Hat Cryostat 4 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8415: Authentication Bypass by Alternate Name in Red Hat Cryostat 4 on RHEL 9


Red Hat Security Advisory: Red Hat Migration Toolkit for ContainersCVE-2025-7783 0 The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API. HighVulnerability#gcve #csaf #cve-2025-7783 Join the discussion	GCVE Database	07/20/2026, 08:34:29 UTC Added: 06/02/2026, 21:43:35 UTC
CVE-2025-8415: Authentication Bypass by Alternate Name in Red Hat Cryostat 4 on RHEL 9CVE-2025-8415 0 A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled, allowing an unauthenticated, malicious attacker to jeopardize the environment. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-8415 Join the discussion	CVE Database V5	08/20/2025, 16:14:33 UTC Added: 08/20/2025, 16:32:47 UTC

Threats Tagged 'cve-2025-8415'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-8415'

Lead Pen Test Professional