Threat Advisories:

Redis Under Siege: RediShell Flaw Opens Door to Remote Code Execution CVE-2025-61882: Oracle EBS Zero-Day Actively Exploited in the Wild Water Saci: Brazil’s WhatsApp-Borne Malware Storm Confucius Hackers Spy on Critical Sectors Using AnonDoor FunkLocker: Emerging AI-Assisted Ransomware Olymp Loader: Modular Malware Built for Rapid Exploitation VMware Aria and Tools Vulnerabilities Fixed Amid Ongoing Exploitation DarkCloud Rising: Spear-Phishing Campaign Targets Manufacturing Sector Active Zero-Day Exploitation on Cisco ASA and FTD Devices BRICKSTORM Malware Quietly Builds the Perfect Hideout in US Networks September 2025 Linux Patch Roundup COLDRIVER’s ClickFix Campaign Targets Civil Voices Critical Cisco SNMP Flaw Exploited: Root Access at Risk DeerStealer the $200 Doorway to Your Digital Secrets Operation Rewrite: How BadIIS Rewired the Web for SEO Poisoning Atomic Stealer Targeting Mac Users via Malicious GitHub Page Subtle Snail’s Silent Espionage Across Europe Gamaredon Tools Revive Turla’s Kazuar Backdoor to Target Ukraine Google Races to Patch Chrome’s Sixth Zero-Day CVE-2025-10585 SilentSync RAT Hides in Plain Sight on PyPI

Hive Force Labs: October First Threat Research

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

CVE-2025-49144: A Silent Shortcut to SYSTEM Privileges in Notepad++

Red | Attack Report

A newly disclosed vulnerability, CVE-2025-49144, affects the Notepad++ installer and could allow attackers to gain full control of a system. The flaw enables malicious actors to place a harmful file in the same directory as the installer, typically the ‘Downloads’ folder, which can be leveraged during installation to compromise the machine. This issue is addressed in Notepad++ version 8.8.2, and users are strongly advised to update to the latest fix to stay protected.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox