Threat Advisories:

Critical Cloud Threat: Azure Blob Storage Under Active Attack Operation Silk Lure Scam: When Job Hunts Leads to Malware Storm-1175’s Masterstroke Exploits CVE-2025-10035 in GoAnywhere MFT F5 BIG-IP Breach: Nation-State Hackers Expose Source Code and Undisclosed Flaws Microsoft’s October 2025 Patch Tuesday TA585 Leverages ClickFix Technique and MonsterV2 Malware Astaroth Targets Brazil Using GitHub Infrastructure CVE-2025-11371: Unpatched Gladinet Flaw Actively Exploited in the Wild Stealit’s New Trick: Packing Malware Inside Node.js Single Executables Hidden in Plain Sight: The Abuse of Nezha and the Ghost RAT That Followed UTA0388: AI-Powered Targeted Operations Leveraging GOVERSHELL Zimbra Zero-Day Hidden in “Harmless” ICS File Targets Military Service Finder Plugin Flaw Opens Door to Full Site Compromise Redis Under Siege: RediShell Flaw Opens Door to Remote Code Execution CVE-2025-61882: Oracle EBS Zero-Day Actively Exploited in the Wild Water Saci: Brazil’s WhatsApp-Borne Malware Storm Confucius Hackers Spy on Critical Sectors Using AnonDoor FunkLocker: Emerging AI-Assisted Ransomware Olymp Loader: Modular Malware Built for Rapid Exploitation VMware Aria and Tools Vulnerabilities Fixed Amid Ongoing Exploitation

Highlights of Our CISO Dinner

Upgrading struggling vulnerability management programs to Threat Exposure Management, with Host, CISO Al Lindseth formerly from Plains All American Pipeline and PWC - 6 minute podcast

0:00

0:00

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

November 15, 2023

Attacks, Vulnerabilities and Actors 6 November to 12 November 2023

For a detailed threat digest, download the pdf file here

Summary

HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of twenty-five executed attacks, six instances of adversary activity, and four exploited vulnerabilities, highlighting the ever-present danger of cyberattacks

Furthermore, HiveForce Labs uncovered an actor named Kinsing exploiting Looney Tunables flaws, Farnetwork threat group in their latest campaign, being the mastermind of Five Ransomware Strains.

Meanwhile, a critical vulnerability (CVE-2023-47246) in SysAid servers is being exploited by the Lace Tempest in various attacks. These observed attacks have been on the rise, posing a significant threat worldwide.

Subscribe to receive our weekly threat digests and newsletters directly in your inbox.

Recent Resources

Dive into our library of resources for expert insights, guides, and in-depth analysis on maximizing Uni5 Xposure’s capabilities

A network map of an enterprise attack surface connecting assets to security vulnerabilities.

Mapping Attack Surface for Enterprises: A 5-Step Guide

Get practical steps for mapping attack surface for enterprises, from asset discovery to risk management, and strengthen your organization’s security posture.

System monitoring dashboard with performance graphs during an antivirus software outage.

Antivirus Software Outage: Is Your Defense Ready?

Learn how to prepare for an antivirus software outage, spot early warning signs, and keep your business protected with practical, actionable security steps.

Security team analyzing risks on a platform for continuous exposure assessment.

What Is a Platform for Continuous Exposure Assessment?

A platform for continuous exposure assessment helps you identify, prioritize, and address security risks across your digital environment in real time.

Magnifying glass over digital screens analyzing data for a cybersecurity assessment tool.

5 Types of Cybersecurity Assessment Tools Compared

Compare five essential types of cybersecurity assessment tool to help you find the right fit for your organization’s security needs and risk management.

AI cybersecurity tools on a dashboard analyzing network data to prevent threats.

6 Essential AI Cybersecurity Tools for Your Stack

Find out which AI cybersecurity tools can help your team detect threats faster, automate response, and strengthen your security stack with real-time insights.

Analyst conducting a critical analysis of CVE vulnerabilities on a complex data dashboard.

Beyond CVSS: Critical CVE Vulnerabilities Analysis

Get practical steps for critical CVE vulnerabilities analysis, including smarter prioritization, risk assessment, and tools to protect your organization.

Cybersecurity team monitoring CISA known exploited vulnerabilities for May 2025 on multiple screens.

CISA Known Exploited Vulnerabilities May 2025: A Guide

Get practical tips for managing CISA Known Exploited Vulnerabilities May 2025. Prioritize threats, streamline patching, and protect your organization.

Magnifying glass highlighting the difference between a vulnerability and an exposure on a digital network.

The Difference Between Vulnerability and Exposure Management Explained

Get clear on the difference between vulnerability and exposure in cybersecurity, with practical tips to help you protect your organization from real threats.

Book a demo and find out more about how Hive Pro can double your operational efficiency