Threat Advisories:

Fake Strike Reports, Real Malware: The LOTUSLITE Delivery Chain Microsoft Teams Social Engineering Delivers A0Backdoor Malware Void Manticore: Iran’s Evolving Cyber Warfare Model Cisco Warns of Actively Exploited Flaws in Catalyst SD-WAN Manager ClipXDaemon Clipboard Attack: Linux Malware Targeting Crypto Payments VMware Patches Aria Operations Flaws as Exploitation Emerges in the Wild Iran-Linked Dust Specter Launches Cyberattack on Iraqi Officials Ruby Jumper: APT37’s Cloud-to-Air-Gap Espionage Framework Dohdoor Malware Campaign Targeting U.S. Education and Healthcare Sectors MIMICRAT Remote Control Delivered Through Trusted Platforms CVE-2026-20127: UAT-8616 Exploiting Cisco Catalyst SD-WAN Zero-Day SANDWORM_MODE: npm Supply Chain Attack Targeting AI Development Tools Mercenary Akula’s Court-Themed Campaign Hits European Finance Operation Olalampo: MuddyWater’s Expanding Campaign Across MENA February 2026 Linux Patch Roundup CRESCENTHARVEST an Espionage Campaign Disguised as Solidarity Fake Homebrew ClickFix Campaign Delivering Cuckoo Stealer on macOS CVE-2026-22769: UNC6201 Exploiting Dell RecoverPoint Zero-Day OysterLoader Threat Model: Silent, Signed, Systematic ClickFix to Control: Matanbuchus Campaign Deploys AstarionRAT in Minutes

Critical Threat Research : Middle-East at WAR: The Rapidly Escalating Iranian Cyber Threat Download the Report

Book a Demo Threat Digest - Subscribe

Mustang Panda Reloaded with an Expanding Malware Arsenal

Amber | Attack Report

Mustang Panda, also known as Earth Preta and Stately Taurus, is an advanced cyber threat actor that has recently enhanced its operations with new malware variants and refined attack strategies. The group has been deploying sophisticated worm-based attacks and conducting spear-phishing campaigns aimed at compromising high-value targets.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox