Weekly Threat Digest : 04 AUGUST to 10 AUGUST 2025

For a detailed threat digest, download the PDF file here

HiveForce Labs has recently made significant advancements in identifying cybersecurity threats. Over the past week, seven major attacks were detected, six critical vulnerabilities were actively exploited, and one threat actor was closely monitored, reflecting an alarming escalation in malicious activities.

In August 2025, Adobe urgently patched three critical AEM Forms on JEE flaws (CVE-2025-49533, CVE-2025-54253, CVE-2025-54254) enabling remote code execution and file access, after public exploit details emerged. Trend Micro found two zero-day flaws in Apex One On-Premise Console, one already exploited, allowing remote code execution without login.

Additionally, SafePay, emerged in September 2024, is a fast-growing private ransomware group behind 200+ attacks in 2025, targeting MSPs and SMBs in the US, Germany, and beyond while avoiding CIS countries. A BYOVD attack exploiting ThrottleStop.sys (CVE-2025-7771) lets attackers disable AV/EDR via kernel memory access.In Brazil, it was used with stolen RDP creds to deploy MedusaLocker. These rising threats pose significant and immediate dangers to users worldwide.

These rising threats represent an immediate and global cybersecurity risk.

Subscribe to receive our weekly threat digests and alerts directly in your inbox.