FortiWeb Hijack: The Hidden Vulnerability Fueling Admin Account Creation

Lazarus Group’s New Comebacker Variant Targets Aerospace & Defense

Threat Actors Turn RMM Tools into Backdoor Gateways

CVE-2025-12480: Triofox Exploit Turns Trusted Access Into a Security Nightmare

Microsoft’s November 2025 Patch Tuesday Roundup

Telegram-Powered Credential Theft Campaign Sweeps Europe

Critical Zero-Day Exposes Synology Devices to Remote Attacks

APT41 Cyber-Espionage Campaign Targets U.S. Policy Institutions

I Paid Twice: Inside the Booking.com Phishing Fraud

Return of Gootloader: Blending Technical Evasion with Operational Discipline

Unmasking Airstalk’s Covert Supply Chain Intrusion

WordPress Plugin Bug CVE-2025-11833 Hands Hackers the Admin Throne

Silent Lynx APT: Espionage Operations Targeting Central Asia’s Critical Infrastructure

SleepyDuck: Trojan Nesting in the Open VSX Marketplace

Operation SkyCloak: Covert Cyber Strikes on Russian and Belarusian Military Personnel

Typosquatted npm Packages Execute Stealthy CredentialTheft Operation

Hijackloader Strikes Colombia with PureHVNC

Vietnamese Actors Use Recruitment Lures for Espionage and Theft

Qilin Ransomware Surge: A Growing Global Threat to Critical Sectors

ClickOnce Deception: SideWinder’s New Path to Diplomats

What’s new on HivePro