Threat Advisories:

Shai-Hulud: Massive npm Supply Chain Attack Infects Hundreds of Packages From Bookings to Breaches: RevengeHotels Latest Attacks on Hospitality BlackNevas Ransomware: A Rising Global Cyber Threat Yurei Ransomware Haunts the Digital World Like a Restless Spirit Click, Paste, Compromise: Inside the New FileFix Campaign Hive0154 Evolves with SnakeDisk and EnhancedToneshell Backdoor HybridPetya: A Bootkit-Enabled Ransomware Threat EvilAI Malware Exploits the Trust in Artificial Intelligence kkRAT Malware Campaign Targeting Chinese-Speaking Users ZynorRAT: Go-Based Malware Taking Shape on Telegram Microsoft September 2025 Patch Tuesday Roundup The Gentlemen Ransomware: A Rising Global Cyber Threat MostereRAT: A Deep Dive into an EPL-Backed Phishing Operation Stealerium Changing the Rules of Cyber Espionage s1ngularity Nx Supply Chain Attack: AI-Driven Credential Theft & Mass Exposure GPUGate: Weaponizing Ads and GitHub to Outsmart Sandboxes Cephalus Ransomware a Wake-Up Call for Stronger Endpoint Defense Sitecore Zero-Day Powers Reconnaissance Malware TP-Link Router End-of-Service Models Exploited in Botnet Operation GhostRedirector Targets Windows Servers Globally for SEO Fraud

Hive Force Labs: Critical Threats Affecting You This Week - 5 Minute Audio Intelligence Report

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

CVE-2024-41992: Unpatched Zero-Day RCE Flaw Found in Arcadyan Routers

Red | Vulnerability Report

CVE-2024-41992 is a severe zero-day vulnerability in the Arcadyan FMIMG51AX000J and potentially other WiFi Alliance devices using the same firmware, allowing remote code execution. The flaw stems from a test utility service on ports 8000 and 8080, which mishandles TLV packets, enabling command injection. A proof-of-concept exploit has been released, and despite being reported in April 2024, no fix is available. Users are advised to restrict remote access and isolate affected devices until a patch is provided.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox