Threat Advisories:

GachiLoader Deployed via the YouTube Ghost Network GhostPoster: A Multi-Stage Malware Campaign Hiding Inside Firefox Extensions CVE-2025-20393: Critical Cisco AsyncOS Zero-Day Actively Exploited SonicWall SMA Flaw Leads to Unauthenticated Root Access Fortinet Authentication Bug Sparks Rapid Exploitation Apple WebKit Zero-Days Exploited in the Wild SantaStealer: An Emerging MaaS Infostealer Ahead of Its 2025 Debut Phantom Stealer Hidden in Fake Bank Confirmations Google Chrome Zero-Day Exploited in ANGLE Graphics Engine BRICKSTORM Breaks In: China’s Quiet Grip on US Virtual Stack The Gogs Blind Spot: A Zero-Day Fueled Mass Compromise Echoes Over UDP: MuddyWater’s Covert Backdoor Strikes Microsoft December 2025 Patch Tuesday Roundup China-Linked Operators Breach Japanese Shipping Networks ShadyPanda’s Seven-Year Operation Built a Browser Extension Spy Empire React2Shell Flaw in React Server Components Under Active Attack ValleyRAT’s Stealthy Job-Lure Campaign Arkanix Stealer’s Fast-Evolving Design Driving Widespread Compromise Water Saci Campaign: Multi-Stage Malware Spreading via WhatsApp Web The Admin Shortcut: King Addons Flaw Under Fire

Hive Pro recognized in Gartner® Magic Quadrant™ for Exposure Assessment Platform, 2025 Watch platform in action

Book a Demo Threat Digest - Subscribe

CVE-2025-3248: Langflow AI Workflow Platform RCE

Red | Vulnerability Report

CVE-2025-3248 is a critical RCE vulnerability in Langflow <1.3.0, caused by unsafe use of Python’s exec() in the /api/v1/validate/code endpoint, allowing unauthenticated attackers to execute arbitrary code via decorators or default arguments. This can lead to full system compromise without authentication. Public PoCs exist, and active exploitation has been observed. Upgrade to Langflow 1.3.0 or restrict endpoint access immediately to mitigate this severe threat.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox