Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Blog post around wireless pivots and now they can be used to attack "secure" enterprise WPA

The threat described as "Wireless Pivots: How Trusted Networks Become Invisible Threat Vectors" refers to a technique where attackers leverage wireless network connections within an enterprise environment to bypass traditional security controls. Specifically, the attack targets WPA-secured wireless networks, which are commonly considered secure within corporate settings. The concept of a wireless pivot involves an attacker gaining initial access to a wireless segment of the network and then using that foothold to move laterally into other parts of the enterprise network that are presumed to be trusted and secure. This pivoting can be done invisibly, meaning that traditional network monitoring and segmentation controls may not detect the malicious activity because the attacker operates within the trusted wireless domain. The blog post referenced appears to highlight how these wireless pivots can undermine the security assumptions around WPA-protected networks, potentially exposing sensitive internal resources. Although no specific affected versions or CVEs are listed, the technique exploits architectural and trust model weaknesses rather than a specific software vulnerability. The lack of known exploits in the wild and minimal discussion on Reddit suggests this is an emerging or theoretical threat rather than a widespread active campaign. However, the medium severity rating indicates a meaningful risk if exploited, especially in environments relying heavily on wireless network segmentation for security.

Detailed information about Wireless Pivots: How Trusted Networks Become Invisible Threat Vectors. Get real-time updates, technical details, and mitigation strat

Wireless Pivots: How Trusted Networks Become Invisible Threat Vectors - Live Threat Intelligence - Threat Radar | OffSeq.com

Wireless Pivots: How Trusted Networks Become Invisible Threat Vectors

Threat Actor Claims TikTok Breach, Puts 428 Million Records Up for Sale

A threat actor has claimed to have breached TikTok and is purportedly offering 428 million user records for sale. The information originates from a Reddit post in the InfoSecNews subreddit and is also reported on hackread.com. The data allegedly compromised includes a vast number of user records, which could contain personally identifiable information (PII), user metadata, and potentially other sensitive details collected by TikTok. However, there is minimal technical detail available to verify the breach's authenticity, the exact nature of the compromised data, or the attack vector used. No specific affected TikTok versions or vulnerabilities have been identified, and no known exploits are currently active in the wild. The discussion and verification level remain low, with a Reddit score of 2 and minimal community engagement. Given TikTok's global user base, such a breach, if confirmed, could have significant privacy and security implications for millions of users worldwide. The lack of detailed technical information limits the ability to fully assess the breach's scope or the threat actor's capabilities.

Detailed information about Threat Actor Claims TikTok Breach, Puts 428 Million Records Up for Sale. Get real-time updates, technical details, and mitigation str

Threat Actor Claims TikTok Breach, Puts 428 Million Records Up for Sale - Live Threat Intelligence - Threat Radar | OffSeq.com

Threat actors abuse Google Apps Script in evasive phishing attacks

This threat involves malicious actors leveraging Google Apps Script to conduct evasive phishing attacks. Google Apps Script is a cloud-based scripting platform integrated with Google Workspace applications such as Gmail, Google Sheets, and Google Docs. Attackers exploit this trusted environment to craft phishing campaigns that bypass traditional security filters. By embedding malicious scripts within Google Apps Script projects, threat actors can send phishing emails or create deceptive web content that appears legitimate because it originates from a trusted Google domain. This technique complicates detection since many security solutions whitelist Google services, allowing malicious payloads to evade email gateways and endpoint protections. The phishing attacks typically aim to harvest credentials, deliver malware, or perform account takeovers. The use of Google Apps Script also enables dynamic content generation and interaction with Google APIs, increasing the sophistication and evasiveness of these campaigns. Although no specific affected versions or exploits in the wild are documented, the medium severity rating indicates a credible risk requiring attention. The minimal discussion and low Reddit score suggest this is an emerging or underreported threat vector.

Detailed information about Threat actors abuse Google Apps Script in evasive phishing attacks. Get real-time updates, technical details, and mitigation strategi

Threat actors abuse Google Apps Script in evasive phishing attacks - Live Threat Intelligence - Threat Radar | OffSeq.com

The threat concerns potential bypasses of the Transparency, Consent, and Control (TCC) framework on macOS. TCC is a security mechanism implemented by Apple to regulate and control application access to sensitive user data and system resources such as the camera, microphone, location services, contacts, calendars, and more. By enforcing user consent for these accesses, TCC plays a critical role in protecting user privacy and system integrity. A TCC bypass implies that an attacker or malicious application could circumvent these consent prompts or restrictions, gaining unauthorized access to protected resources without user approval. Although specific technical details are sparse, the mention of TCC bypasses suggests exploitation of weaknesses or design flaws in the macOS privacy controls, potentially through privilege escalation, manipulation of TCC databases, or exploiting system APIs. The threat was discussed on the Reddit NetSec community with minimal discussion and no known exploits currently in the wild. No affected macOS versions or patches are identified, indicating this is likely an emerging or theoretical threat rather than a confirmed vulnerability with active exploitation. Given the medium severity assigned, the threat is recognized as significant but not immediately critical. The lack of detailed technical information limits precise understanding, but the implications of TCC bypasses are serious due to the sensitive nature of the data and resources protected by TCC.

Detailed information about Threat of TCC Bypasses on macOS. Get real-time updates, technical details, and mitigation strategies.

Threat of TCC Bypasses on macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

Threat of TCC Bypasses on macOS

Malvertising's New Threat: Exploiting Trusted Google Domains

The reported security threat involves a malvertising campaign that exploits trusted Google domains to deliver malicious advertisements. Malvertising, or malicious advertising, is a technique where attackers inject malicious code into legitimate online advertising networks, which then serve these ads on reputable websites. In this case, the threat actors leverage the inherent trust users place in Google domains to bypass traditional security filters and increase the likelihood of successful exploitation. Although specific technical details are limited, the exploitation likely involves embedding malicious scripts or redirect mechanisms within ads served through Google's advertising infrastructure or domains closely associated with Google services. This approach allows attackers to evade detection by security tools that whitelist Google domains, thereby increasing the reach and effectiveness of the malvertising campaign. The absence of known exploits in the wild and limited discussion on the Reddit NetSec subreddit suggest that this is an emerging threat, possibly in early stages of discovery or exploitation. The medium severity rating indicates a moderate risk level, potentially due to the difficulty of exploitation or limited impact scope at present. However, the use of trusted domains for malicious purposes represents a significant shift in attacker tactics, as it undermines user trust and complicates defensive measures.

Detailed information about Malvertising's New Threat: Exploiting Trusted Google Domains. Get real-time updates, technical details, and mitigation strategies.


Wireless Pivots: How Trusted Networks Become Invisible Threat Vectors 0 Blog post around wireless pivots and now they can be used to attack "secure" enterprise WPA MediumCampaignGermanyFranceUnited Kingdom+4#netsec #reddit #thexero.co.uk Join the discussion	Reddit NetSec	05/31/2025, 10:22:37 UTC Added: 05/31/2025, 10:28:28 UTC
Threat Actor Claims TikTok Breach, Puts 428 Million Records Up for Sale 0 Threat Actor Claims TikTok Breach, Puts 428 Million Records Up for Sale MediumCampaignUnited KingdomGermanyFrance+5#infosecnews #reddit #hackread.com Join the discussion	Reddit InfoSec News	05/30/2025, 13:20:46 UTC Added: 05/30/2025, 13:28:33 UTC
Threat actors abuse Google Apps Script in evasive phishing attacks 0 Threat actors abuse Google Apps Script in evasive phishing attacks MediumPhishingUnited KingdomGermanyFrance+6#infosecnews #reddit #bleepingcomputer.com Join the discussion	Reddit InfoSec News	05/29/2025, 18:48:54 UTC Added: 05/29/2025, 18:59:49 UTC
Threat of TCC Bypasses on macOS 0 Threat of TCC Bypasses on macOS MediumNewsGermanyFranceUnited Kingdom+7#netsec #reddit #afine.com Join the discussion	Reddit NetSec	05/26/2025, 10:24:39 UTC Added: 05/27/2025, 11:07:19 UTC
Malvertising's New Threat: Exploiting Trusted Google Domains 0 Malvertising's New Threat: Exploiting Trusted Google Domains MediumNewsGermanyFranceUnited Kingdom+4#netsec #reddit #geoedge.com Join the discussion	Reddit NetSec	05/20/2025, 21:11:10 UTC Added: 05/28/2025, 03:05:54 UTC

Threats Tagged 'threat'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'threat'

Lead Pen Test Professional