Weekly Threat Digest : 25 AUGUST to 31 AUGUST 2025

For a detailed threat digest, download the PDF file here

HiveForce Labs has recently made significant advancements in identifying cybersecurity threats. Over the past week, two major attacks were detected, nine critical vulnerabilities were actively exploited, and three threat actors were closely monitored, reflecting an alarming escalation in malicious activities.

Citrix disclosed three critical NetScaler ADC and Gateway flaws (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424), with CVE-2025-7775 actively exploited for unauthenticated RCE/DoS. As no workarounds exist, immediate patching of affected systems to the fixed versions is required to prevent compromise.

Additionally, Salt Typhoon, a Chinese state-backed group, has expanded globally, hitting 600+ organizations in 80 countries by exploiting known vulnerabilities, with telecoms and critical sectors heavily targeted. Storm-0501 has shifted from traditional ransomware to cloud-native attacks, exploiting identity gaps to escalate privileges, exfiltrate data, delete backups, and execute ransomware directly in the cloud. These rising threats pose significant and immediate dangers to users worldwide.

These rising threats represent an immediate and global cybersecurity risk.

Subscribe to receive our weekly threat digests and alerts directly in your inbox.