The Chinese-speaking threat actor UAT-6382 exploited CVE-2025-0994, a zero-day vulnerability in Trimble Cityworks, enabling remote code execution, conducting targeted reconnaissance, and deploying custom malware for persistent access within critical infrastructure networks. Unpatched systems remain at high risk of similar attacks and operational disruption.
What’s new on HivePro
Get through updates and upcoming events, and more directly in your inbox
