Threat Advisories:

Fake Strike Reports, Real Malware: The LOTUSLITE Delivery Chain Microsoft Teams Social Engineering Delivers A0Backdoor Malware Void Manticore: Iran’s Evolving Cyber Warfare Model Cisco Warns of Actively Exploited Flaws in Catalyst SD-WAN Manager ClipXDaemon Clipboard Attack: Linux Malware Targeting Crypto Payments VMware Patches Aria Operations Flaws as Exploitation Emerges in the Wild Iran-Linked Dust Specter Launches Cyberattack on Iraqi Officials Ruby Jumper: APT37’s Cloud-to-Air-Gap Espionage Framework Dohdoor Malware Campaign Targeting U.S. Education and Healthcare Sectors MIMICRAT Remote Control Delivered Through Trusted Platforms CVE-2026-20127: UAT-8616 Exploiting Cisco Catalyst SD-WAN Zero-Day SANDWORM_MODE: npm Supply Chain Attack Targeting AI Development Tools Mercenary Akula’s Court-Themed Campaign Hits European Finance Operation Olalampo: MuddyWater’s Expanding Campaign Across MENA February 2026 Linux Patch Roundup CRESCENTHARVEST an Espionage Campaign Disguised as Solidarity Fake Homebrew ClickFix Campaign Delivering Cuckoo Stealer on macOS CVE-2026-22769: UNC6201 Exploiting Dell RecoverPoint Zero-Day OysterLoader Threat Model: Silent, Signed, Systematic ClickFix to Control: Matanbuchus Campaign Deploys AstarionRAT in Minutes

Critical Threat Research : Middle-East at WAR: The Rapidly Escalating Iranian Cyber Threat Download the Report

Book a Demo Threat Digest - Subscribe

Iranian hackers soar into the defense sectors of the Middle East

Threat Level – Red | Vulnerability Report

Since June 2022, the hacking group UNC1549, potentially connected to Tortoiseshell (aka Imperial Kitten) and linked with the Iranian IRGC, has implemented distinct backdoors known as MiniBike and MiniBus. Their primary focus lies in targeting defense-related entities in the Middle East.

Threat Level – Red | Attack Report

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox