Threat Advisories:

72-Hour Window of Trust: Fox Tempest’s Abuse of Microsoft Artifact Signing May 2026 Linux Patch Roundup From npm to GitHub: TeamPCP’s May 2026 Escalation Reaches the Source Code Platform Inside Storm-2949’s Cloud Takeover Campaign Targeting Microsoft 365 and Azure Dead.Letter Walking: Unauthenticated RCE Stalks Exim Mail Servers One Million WordPress Sites at Risk: Avada Builder Flaws Expose Sensitive Data Three Strikes in Two Weeks: Fragnesia Joins the Dirty Frag Family Critical NGINX Vulnerabilities Including 18-Year-Old RCE Flaw Actively Exploited Active Exploitation of CVE-2026-42897 Targets Microsoft Exchange Servers FamousSparrow’s Persistent Hold on Azerbaijani Oil & Gas Cisco SD-WAN Authentication Bypass Exploited in Zero-Day Attacks Mini Shai-Hulud npm Supply Chain Worm: TanStack and Multi-Ecosystem Compromise Malicious Ruby Gems Fuel GemStuffer Data Theft Campaign Microsoft’s May 2026 Patch Tuesday PCPJack Hijacks Vulnerable Servers With Worm-Like Cloud Propagation Tactics QLNX Unmasked: Advanced Linux Malware Targets Developers and Cloud Infrastructure Dirty Frag A 2017 Optimization That Aged Into a Root Exploit TCLBanker: Trojanized Logitech Installer Fuels Banking Malware Campaign Ivanti EPMM Flaws Threaten Enterprise Device Management Systems Is Your Spring Config Server an Open Door? CVE-2026-40982 Says Yes

New Report

Critical Threat Research : The Iranian Cyber War Intensifies! Download the Report

Book a Demo Free Iranian Exposure Assessment

Grandoreiro Trojan: An Evolving Threat to Global Banking

Threat Level – Red | Vulnerability Report

Summary:

The Grandoreiro banking Trojan, initially targeting Latin America, has evolved to attack financial institutions globally, now targeting over 1500 banks in 60 countries. The latest variant can harvest email addresses from infected Outlook clients to send further phishing emails, underscoring the need for enhanced global security measures.

Threat Level – Red | Attack Report

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox