Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.

CVE-2025-29946 is a hardware-level vulnerability identified in the AMD EPYC™ 9005 Series processors, specifically within the Secure Encrypted Virtualization (SEV) firmware component. The issue stems from insufficient or incomplete data removal due to the SEV firmware not fully flushing the Input-Output Memory Management Unit (IOMMU). The IOMMU is critical in managing memory access and isolation between virtual machines (VMs) and hardware devices. Failure to properly flush the IOMMU can lead to residual data remaining accessible in guest memory, undermining the confidentiality and integrity guarantees expected in virtualized environments. This vulnerability is categorized under CWE-1301, which relates to improper clearing or sanitization of data. The CVSS 4.0 score of 4.5 reflects a medium severity, considering the attack vector is local (AV:L), requires high attack complexity (AC:H), and privileges (PR:H), but does not require user interaction (UI:N). The scope and impact are high (SI:H), indicating that the vulnerability affects the security properties of the system beyond the vulnerable component. No public patches or exploits are currently known, but the risk is significant in environments where AMD EPYC 9005 processors are used to host sensitive virtualized workloads, such as cloud service providers and enterprise data centers.

Detailed information about CVE-2025-29946: CWE-1301  Insufficient or Incomplete Data Removal within Hardware Component in AMD AMD EPYC™ 9005 Series Processors a

CVE-2025-29946: CWE-1301  Insufficient or Incomplete Data Removal within Hardware Component in AMD AMD EPYC™ 9005 Series Processors - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-29946: CWE-1301  Insufficient or Incomplete Data Removal within Hardware Component in AMD AMD EPYC™ 9005 Series Processors

BLU-IC2

Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CVE-2025-12216 is a critical hardware-level vulnerability classified under CWE-1301 (Insufficient or Incomplete Data Removal) affecting Azure Access Technology's BLU-IC2 and BLU-IC4 components up to firmware version 1.19.5. The flaw allows malicious or malformed applications to be installed onto the hardware but prevents their uninstallation, leading to persistent presence of potentially harmful code or data. This incomplete data removal can cause denial of service conditions by rendering the device or system unavailable or unstable. The vulnerability is remotely exploitable without any authentication or user interaction, as indicated by the CVSS 4.0 vector (AV:N/AC:L/AT:N/UI:N), and impacts confidentiality, integrity, and availability at a high level. The hardware components in question are typically used in secure access or identity verification systems, meaning exploitation could undermine security controls or disrupt critical authentication processes. Although no exploits have been reported in the wild yet, the critical severity and ease of exploitation make this a high-priority issue. The lack of available patches at the time of disclosure further elevates the risk. Organizations relying on these components should be aware of the potential for persistent malicious code and service disruption stemming from this vulnerability.

Detailed information about CVE-2025-12216: CWE-1301: Insufficient or Incomplete Data Removal within Hardware Component in Azure Access Technology BLU-IC2 affect

CVE-2025-12216: CWE-1301: Insufficient or Incomplete Data Removal within Hardware Component in Azure Access Technology BLU-IC2 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12216: CWE-1301: Insufficient or Incomplete Data Removal within Hardware Component in Azure Access Technology BLU-IC2


CVE-2025-29946: CWE-1301 Insufficient or Incomplete Data Removal within Hardware Component in AMD AMD EPYC™ 9005 Series ProcessorsCVE-2025-29946 0 Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-29946 #cwe-1301 Join the discussion	CVE Database V5	02/10/2026, 19:15:57 UTC Added: 02/10/2026, 19:46:19 UTC
CVE-2025-12216: CWE-1301: Insufficient or Incomplete Data Removal within Hardware Component in Azure Access Technology BLU-IC2CVE-2025-12216 0 Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. CriticalVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-12216 #cwe-1301 Join the discussion	CVE Database V5	10/25/2025, 15:33:18 UTC Added: 10/25/2025, 15:41:26 UTC

Threats Tagged 'cwe-1301'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-1301'

Lead Pen Test Professional