Threat Advisories:

Ivanti EPMM Flaws Threaten Enterprise Device Management Systems Is Your Spring Config Server an Open Door? CVE-2026-40982 Says Yes PAN-OS Buffer Overflow Flaw Under Active State-Sponsored Exploitation Unauthenticated RCE in Weaver E-cology Actively Exploited Tax Trap to Full Takeover: Inside the Silver Fox Multi-Stage Intrusion Chain One Script, Every Distro, Full Root: Copy Fail Vulnerability Rewriting Linux Threat Models CVE-2026-42208: The LiteLLM Flaw Letting Attackers Reach Deep Inside VECT Ransomware: Flawed Encryption Turns RaaS Locker into Irreversible File Wiper Operation TrustTrap: APT36 Weaponizes 16,800 Spoofed Domains Patched but Not Cured: FIRESTARTER Backdoor Survives Cisco Firewall Upgrades The Gentlemen Ransomware: A Rapidly Scaling RaaS Threat Tropic Trooper Shifts Tradecraft to Open-Source Offensive Frameworks UNC6692 Social Engineering Campaign Deploying SNOW Malware Suite April 2026 Linux Patch Roundup LOTUSLITE v1.1: Enhanced Evasion Meets Banking-Themed Social Engineering Lotus Wiper: Silent Sabotage Targeting Venezuela’s Energy Sector Brand Hijack in Cybercrime: Who Is Pretending to Be ShinyHunters? Nexcorium: IoT Botnet Campaign Exploiting TBK DVR Devices CVE-2026-34197: Jolokia Exposure Enables RCE in ActiveMQ Inside the PHANTOMPULSE Social Engineering Kill Chain

New Report

Critical Threat Research : The Iranian Cyber War Intensifies! Download the Report

Book a Demo Free Iranian Exposure Assessment

Earth Aughisky uses a new set of malware

Threat Level – Red | Vulnerability Report

Earth Aughisky, a well-known cyber espionage group is exploiting legitimate accounts, software, applications, and other weaknesses by conducting a spearphishing campaign to disrupt everyday activities of organizations mainly in Japan and Taiwan

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox