Threat Advisories:

EvilAI Malware Exploits the Trust in Artificial Intelligence kkRAT Malware Campaign Targeting Chinese-Speaking Users ZynorRAT: Go-Based Malware Taking Shape on Telegram Microsoft September 2025 Patch Tuesday Roundup The Gentlemen Ransomware: A Rising Global Cyber Threat MostereRAT: A Deep Dive into an EPL-Backed Phishing Operation Stealerium Changing the Rules of Cyber Espionage s1ngularity Nx Supply Chain Attack: AI-Driven Credential Theft & Mass Exposure GPUGate: Weaponizing Ads and GitHub to Outsmart Sandboxes Cephalus Ransomware a Wake-Up Call for Stronger Endpoint Defense Sitecore Zero-Day Powers Reconnaissance Malware TP-Link Router End-of-Service Models Exploited in Botnet Operation GhostRedirector Targets Windows Servers Globally for SEO Fraud CVE-2025-55177: WhatsApp Zero-Click Flaw Used in Targeted Campaigns Experimental AI Ransomware PromptLock Sparks Security Concerns NightSpire Ransomware Expands Reach with Aggressive Extortion Deadlines Operation HanKook Phantom: APT37’s Stealthy Espionage Campaign Storm-0501’s Shift to Cloud-Native Ransomware Salt Typhoon Cyber Attacks Hit 200 Organizations in the United States CVE-2025-7775: Actively Exploited Critical Flaw in Citrix NetScaler

Hive Force Labs: Critical Threats Affecting You This Week - 5 Minute Audio Intelligence Report

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

Actively exploited vulnerability affects Trend Micro Apex Central

Threat Level – Amber | Vulnerability Report

THREAT LEVEL: Amber

Trend Micro Apex Central (on-premise and as a Service) has a zero-day vulnerability. This arbitrary file upload vulnerability if successfully exploited, could allow an unauthenticated remote attacker to upload any file, resulting in remote code execution. Organizations are advised to upgrade their Apex Central to the latest version available.

Potential MITRE ATT&CK TTPs are:

TA0042: Resource Development

TA0001: Initial Access

TA0002: Execution

T1588: Obtain Capabilities

T1588.006: Obtain Capabilities: Vulnerabilities

T1190: Exploit Public-Facing Application

T1059: Command and Scripting Interpreter

Vulnerability Details

Patch Links

https://files.trendmicro.com/jp/ucmodule/apexcentral/win/2019/apexcentral_2019_gm_win_ja_3945_r3.exe

https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4395

References

https://success.trendmicro.com/jp/solution/000290660

https://jvn.jp/vu/JVNVU99107357/

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox