Threat Advisories:

Operation Hanoi Thief: When Fake CVs Become Cyber Weapons CVE-2025-61757: Oracle Identity Manager Pre-Auth RCE Under Active Attack ShadowPad Gatecrashes the Enterprise by Hijacking WSUS Vulnerability Shai-Hulud 2.0 Fuels Global NPM Supply-Chain Compromise StealC V2 Spreads via Malicious Blender Files The Windows Update Deception: How ClickFix Lures Unleash Stealthy Stealers Cl0p Ransomware Surge 2025: Operational Patterns and Key Mitigations ShadowRay Strikes Back: Inside the Multi-Purpose Ray Cluster Takeover November 2025 Linux Patch Roundup CVE-2025-11001 Turns a Simple Unzip into a System-Level Ambush CVE-2025-55241: Critical Cross-Tenant Privilege Escalation in Microsoft Entra ID TamperedChef: A High-Severity Multi-Stage Infostealer Operation Eternidade Stealer: Brazil’s New WhatsApp-Driven Cybercrime Engine Gh0st RAT Multi-Campaign Delivery Surge Targets Chinese Speakers FortiWeb Flaw Exploited in the Wild: Patch Immediately Google Patches High-Risk V8 Zero-Day Hitting Chrome Users FortiWeb Hijack: The Hidden Vulnerability Fueling Admin Account Creation Lazarus Group’s New Comebacker Variant Targets Aerospace & Defense Threat Actors Turn RMM Tools into Backdoor Gateways CVE-2025-12480: Triofox Exploit Turns Trusted Access Into a Security Nightmare

Hive Pro recognized in Gartner® Magic Quadrant™ for Exposure Assessment Platform, 2025 Watch platform in action

Book a Demo Threat Digest - Subscribe

Information Stealer LummaC2 Targets Browsers and Crypto Wallets

Threat Level – Amber | Vulnerability Report

LummaC2 Stealer is an information stealer that targets Chromium and Mozilla-based browsers. It is designed to steal sensitive information from a victim’s machine, including crypto wallets, extensions, and two-factor authentication (2FA). The malware is sold on a Russian website for prices ranging from $250 to $20,000.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox

Email*

First Name*

Last Name

Country