Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

security-advisories

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0.

CVE-2025-53899 is a vulnerability classified under CWE-941 (Incorrectly Specified Destination in a Communication Channel) affecting Kiteworks Managed File Transfer (MFT) products prior to version 9.1.0. The flaw arises from improper specification of communication channel destinations within the back-end architecture of Kiteworks MFT. An attacker who already possesses administrative privileges on the affected system can exploit this vulnerability to intercept upstream communications. This interception can lead to an escalation of privileges, allowing the attacker to gain higher-level access or control than initially permitted. The vulnerability impacts the confidentiality, integrity, and availability of data handled by the system, as intercepted communications may contain sensitive information or control commands. The CVSS v3.1 score of 7.2 reflects a high severity due to network attack vector (AV:N), low attack complexity (AC:L), required privileges being high (PR:H), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). The vulnerability was publicly disclosed on November 29, 2025, and has been addressed in Kiteworks MFT version 9.1.0. No known exploits have been observed in the wild, but the potential impact warrants immediate attention. Kiteworks MFT is widely used in enterprise environments for secure file transfer workflows, making this vulnerability particularly concerning for organizations handling sensitive or regulated data.

Detailed information about CVE-2025-53899: CWE-941: Incorrectly Specified Destination in a Communication Channel in kiteworks security-advisories affecting kite

CVE-2025-53899: CWE-941: Incorrectly Specified Destination in a Communication Channel in kiteworks security-advisories - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53899: CWE-941: Incorrectly Specified Destination in a Communication Channel in kiteworks security-advisories

In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data.

CVE-2025-0036 is a vulnerability identified in AMD's Platform Loader and Manager (PLM) component, specifically affecting AMD Versal Adaptive SoC devices. The core issue involves an incorrect calculation or configuration of the Secure Subsystem (SSS) during runtime cryptographic operations, which occur after the system boot phase. This misconfiguration can lead to data being written to and read from invalid memory locations, resulting in the return of incorrect cryptographic data. The vulnerability is categorized under several CWE identifiers, including CWE-682 (Incorrect Calculation), CWE-772 (Missing Release of Resource after Effective Lifetime), CWE-940 (Improper Initialization), CWE-941 (Improper Handling of Exceptional Conditions), and CWE-497 (Exposure of Sensitive Information to an Unauthorized Actor). These classifications suggest that the vulnerability stems from flawed logic in cryptographic processing and resource management within the PLM. The CVSS v3.1 base score is 3.2, indicating a low severity level. The vector string (AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) reveals that exploitation requires local access with low privileges, some user interaction, and results in a confidentiality impact with scope change but no integrity or availability impact. No known exploits are currently reported in the wild, and no patches are linked yet, though affected versions are referenced in AMD-SB-8011. The vulnerability could cause cryptographic operations to produce incorrect outputs, potentially undermining the security guarantees of cryptographic functions, which may affect secure communications, data protection, or authentication mechanisms relying on the PLM's cryptographic services.

Detailed information about CVE-2025-0036: CWE-682 Incorrect Calculation in AMD Platform Loader and Manager (PLM) affecting AMD Platform Loader and Manager (PLM)

CVE-2025-0036: CWE-682 Incorrect Calculation in AMD Platform Loader and Manager (PLM) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-0036: CWE-682 Incorrect Calculation in AMD Platform Loader and Manager (PLM)


CVE-2025-53899: CWE-941: Incorrectly Specified Destination in a Communication Channel in kiteworks security-advisoriesCVE-2025-53899 0 Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0. HighVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-53899 #cwe-941 Join the discussion	CVE Database V5	11/29/2025, 02:25:23 UTC Added: 11/29/2025, 03:07:38 UTC
CVE-2025-0036: CWE-682 Incorrect Calculation in AMD Platform Loader and Manager (PLM)CVE-2025-0036 0 In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data. LowVulnerabilityGermanyFranceNetherlands+6#cve #cve-2025-0036 #cwe-682 Join the discussion	CVE Database V5	06/09/2025, 23:57:39 UTC Added: 06/10/2025, 18:54:11 UTC

Threats Tagged 'cwe-941'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-941'

Lead Pen Test Professional