Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attacker to perform EM Fault Injection and bypass APPROTECT at runtime, requiring the least amount of modification to the hardware system possible.

CVE-2025-9709 is a high-severity vulnerability affecting the Nordic Semiconductor nRF52810 microcontroller, specifically targeting its On-Chip Debug and Test Interface. The vulnerability arises from improper access control mechanisms and insufficient protection against Electromagnetic Fault Injection (EM-FI) attacks. EM-FI is a sophisticated hardware attack technique where an attacker induces faults in the device's operation by exposing it to controlled electromagnetic disturbances. This can cause the device to behave unpredictably or bypass security features. In this case, the vulnerability allows an attacker to bypass the APPROTECT security feature at runtime. APPROTECT is designed to prevent unauthorized access to debug interfaces, which are critical for device security as they can expose sensitive firmware and cryptographic keys. The attack requires minimal hardware modification, making it more feasible for adversaries with physical access to the device. The CVSS 4.0 score of 8.6 reflects the high impact on confidentiality, integrity, and availability, with the attack vector being physical (AV:P), low attack complexity (AC:L), no privileges or user interaction required, and high impact on all security properties. The vulnerability is categorized under CWE-1191 (Improper Access Control) and CWE-1319 (Improper Protection Against Electromagnetic Fault Injection). No known exploits are reported in the wild yet, and no patches have been published at the time of this report.

Detailed information about CVE-2025-9709: CWE-1191: On-Chip Debug and Test Interface With Improper Access Control in Nordic Semiconductor nRF52810 affecting Nor

CVE-2025-9709: CWE-1191: On-Chip Debug and Test Interface With Improper Access Control in Nordic Semiconductor nRF52810 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9709: CWE-1191: On-Chip Debug and Test Interface With Improper Access Control in Nordic Semiconductor nRF52810

gecko_sdk

Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B.

CVE-2023-5138 is a vulnerability identified in Silicon Labs' GSDK (Gecko SDK) version 1.0, specifically affecting the Cortex-M33 core used in Silicon Labs' secure vault high parts EFx32xG2xB microcontrollers, excluding the EFR32xG21B series. The vulnerability stems from the fact that glitch detection mechanisms, which are designed to detect and mitigate electromagnetic fault injection (EM-FI) attacks, are not enabled by default. Electromagnetic fault injection is a sophisticated attack technique where an attacker induces faults in a device's operation by exposing it to carefully controlled electromagnetic interference. This can cause the device to behave unpredictably, potentially bypassing security controls or corrupting sensitive operations. The CWE-1319 classification highlights improper protection against such fault injection attacks. The CVSS v3.1 base score of 6.8 (medium severity) reflects the vulnerability's characteristics: it requires physical access (Attack Vector: Physical), has low attack complexity, no privileges or user interaction needed, and impacts confidentiality, integrity, and availability to a high degree. However, the physical access requirement limits the attack surface. The vulnerability affects critical security features of Silicon Labs' secure microcontrollers, which are often used in IoT, industrial control, and embedded security applications. The lack of enabled glitch detection by default means that unless developers explicitly activate these protections, devices remain vulnerable to fault injection attacks that can compromise cryptographic operations, secure key storage, or firmware integrity. No known exploits are currently reported in the wild, and no patches have been linked yet, indicating that mitigation may require configuration changes or firmware updates from Silicon Labs. This vulnerability underscores the importance of enabling hardware-level protections against fault injection in security-critical embedded systems.

Detailed information about CVE-2023-5138: CWE-1319 Improper Protection against Electromagnetic Fault Injection (EM-FI) in silabs.com GSDK affecting silabs.com G

CVE-2023-5138: CWE-1319 Improper Protection against Electromagnetic Fault Injection (EM-FI) in silabs.com GSDK - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-5138: CWE-1319 Improper Protection against Electromagnetic Fault Injection (EM-FI) in silabs.com GSDK


CVE-2025-9709: CWE-1191: On-Chip Debug and Test Interface With Improper Access Control in Nordic Semiconductor nRF52810CVE-2025-9709 0 On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attacker to perform EM Fault Injection and bypass APPROTECT at runtime, requiring the least amount of modification to the hardware system possible. HighVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-9709 #cwe-1191 Join the discussion	CVE Database V5	09/05/2025, 17:16:16 UTC Added: 09/05/2025, 17:21:13 UTC
CVE-2023-5138: CWE-1319 Improper Protection against Electromagnetic Fault Injection (EM-FI) in silabs.com GSDKCVE-2023-5138 0 Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B. MediumVulnerabilityGermanyFranceItaly+5#cve #cve-2023-5138 #cwe-1319 Join the discussion	CVE Database V5	01/03/2024, 22:31:04 UTC Added: 06/03/2025, 14:59:14 UTC

Threats Tagged 'cwe-1319'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-1319'

Lead Pen Test Professional