Threat Advisories:

July 2025 Linux Patch Roundup Operation CargoTalon: Targeting Russian Aerospace & Defense Sector Greedy Sponge’s Stealthy RAT Attack in Mexico COLDRIVER Creeps Closer with LOSTKEYS Malware Operation RoundPress: APT28’s Webmail Espionage Exposed TransferLoader: The Malware That Outsmarts Security CVE-2025-4664: Google Chrome’s Zero-Day Flaw Exploited in the Wild Microsoft Shuts Down Five Zero-Days in Latest Patch Rollout Ivanti Addresses Critical Zero-Day Vulnerabilities in EPMM Software Samsung Patches Actively Exploited MagicINFO 9 Server Zero-Day Exploited in the Wild: Fortinet Urges Patch for Critical Zero-Day Espionage Ops Exploit Output Messenger Vulnerability PupkinStealer: The Silent Thief Hiding in Plain Sight Popular npm Package ‘rand-user-agent’ Compromised in Supply Chain Attack APT36’s Dark Playbook: Crimson Codes and Crisis Lures Strike India DragonForce Is Selling DIY Ransomware Kits Agenda Ransomware Group Escalates Attacks with New Multi-Stage Loaders Earth Kasha Returns with New Tools in Its Cyber Espionage Campaign Critical Firefox Flaw CVE-2025-2857 Lets Attackers Escape Sandbox Silent Escalation: CLFS Zero-Day Used in Targeted Attack

Partner Program

Book a Demo Threat Digest - Subscribe

Condi Malware Strikes TP-Link Routers for DDoS Rampage

Threat Level – Red | Vulnerability Report

Condi, a recently discovered malware, utilizes a security vulnerability within TP-Link Archer Wi-Fi routers to ensnare these devices into a botnet specifically designed for launching distributed denial-of-service (DDoS) attacks.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox