Threat Advisories:

F5 BIG-IP Breach: Nation-State Hackers Expose Source Code and Undisclosed Flaws Microsoft’s October 2025 Patch Tuesday TA585 Leverages ClickFix Technique and MonsterV2 Malware Astaroth Targets Brazil Using GitHub Infrastructure CVE-2025-11371: Unpatched Gladinet Flaw Actively Exploited in the Wild Stealit’s New Trick: Packing Malware Inside Node.js Single Executables Hidden in Plain Sight: The Abuse of Nezha and the Ghost RAT That Followed UTA0388: AI-Powered Targeted Operations Leveraging GOVERSHELL Zimbra Zero-Day Hidden in “Harmless” ICS File Targets Military Service Finder Plugin Flaw Opens Door to Full Site Compromise Redis Under Siege: RediShell Flaw Opens Door to Remote Code Execution CVE-2025-61882: Oracle EBS Zero-Day Actively Exploited in the Wild Water Saci: Brazil’s WhatsApp-Borne Malware Storm Confucius Hackers Spy on Critical Sectors Using AnonDoor FunkLocker: Emerging AI-Assisted Ransomware Olymp Loader: Modular Malware Built for Rapid Exploitation VMware Aria and Tools Vulnerabilities Fixed Amid Ongoing Exploitation DarkCloud Rising: Spear-Phishing Campaign Targets Manufacturing Sector Active Zero-Day Exploitation on Cisco ASA and FTD Devices BRICKSTORM Malware Quietly Builds the Perfect Hideout in US Networks

HIVE FORCE LABS

October First Threat Research

0:00

0:00

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

Critical WordPress GiveWP Flaw Exposes 100,000+ Sites to RCE & File Deletion

Red | Vulnerability Report

CVE-2024-5932 is a critical vulnerability in the GiveWP plugin for WordPress, allowing unauthenticated attackers to execute arbitrary code and delete files. The vulnerability, with a CVSS score of 10.0, is present in all versions up to 3.14.1 due to improper validation of the give_title parameter. Users are advised to update to version 3.14.2 or later to mitigate the risks of complete site compromise, data loss, and operational disruptions.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox