Threat Advisories:

Crypto24 Ransomware Disrupts Businesses Using Custom EDR Bypass GodRAT Reloaded: Legacy Code, Modern Tactics Noodlophile Stealer Advances with Obfuscation, Social Media Deception PS1Bot: The Modular Malware Lurking Behind Malvertising Microsoft’s August 2025 Patch Tuesday Roundup Charon Ransomware Encrypts Files Belonging to Middle East Industries CVE-2025-25256: Fortinet Rushes to Patch High-Risk FortiSIEM Vulnerability Efimer Trojan: From Fake Lawsuits to Crypto Heists Zero-Day in WinRAR Actively Weaponized by Multiple Threat Groups DarkCloud Uses Fileless Techniques Turning into a Nightmare for Windows CastleBot Rising: The Evolving Malware-as-a-Service Threat MedusaLocker Uses ThrottleStop.sys Flaw to Kill AV on Windows Malicious npm Packages Target WhatsApp Developers with Kill Switch Trend Micro Warns of Active Exploits in Apex One Console SafePay Ransomware’s Rapid Ascent to the Top of the Cybercrime Scene Adobe Patches Three Critical Flaws in AEM Forms on JEE Plague in the Shadows: Unmasking a Silent Linux Backdoor RoKRAT Resurfaces: APT37’s Fileless Shortcut to Espionage Secret Blizzard Strikes Moscow with ApolloShadow Alone Theme Vulnerability Puts WordPress Sites at Risk

Podcast: This Month's Threats in 10 Min! Emerging Threat Intel Audio Briefing - Listen & Defend Now →

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

Alone Theme Vulnerability Puts WordPress Sites at Risk

Red | Vulnerability Report

A critical vulnerability (CVE-2025-5394) in the popular Alone – Charity Multipurpose Non-profit WordPress Theme has put thousands of websites at serious risk. Affecting versions up to 7.8.3, this flaw lets attackers upload malicious files without needing to log in, no passwords, and no admin rights. By exploiting a weak plugin installer, hackers can install backdoors disguised as innocent-looking plugins, giving them full control over the site. What’s more alarming is that exploitation began even before the vulnerability was made public, with over 120,900 attack attempts already blocked. This shows how fast and aggressive threat actors are, and why it’s crucial for site owners to patch immediately.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox