Threat Advisories:

From Advisory to Attack in Under 10 Hours: Marimo’s Critical RCE Flaw Handala Claims Destructive Wiper Attack on GCC Nation’s Critical Infrastructure Active Exploitation of Critical Adobe Prototype Pollution Flaw Masjesu: Exploit-Driven Botnet with Stealth, Scale, and Staying Power UAT-10362 Deploys LucidRook Malware Against Taiwanese NGOs Pawn Storm’s Dual Zero-Day Exploit Unleashed Important according to Google magic Iranian-Affiliated CyberAv3ngers Exploits Internet-Exposed PLCs in U.S. APT28 Exploits SOHO Routers for Large-Scale DNS Hijacking and Credential Theft Spraying for Access: Iran-Aligned Actors Turn Weak Credentials into Intelligence TrueConf Zero-Day Abused in Operation TrueChaos to Weaponize Software Updates Fortinet EMS Left Defenseless by CVE-2026-35616 Axios npm Supply Chain Attack: What You Need to Know CVE-2026-5281: Chrome Dawn Flaw Sparks In-the-Wild Zero-Day Attacks CVE-2026-3055: Silent Memory Leak in NetScaler Actively Exploited Tracking Beast: Tools, Techniques, and Tradecraft in RaaS Operations FAUX#ELEVATE: Obfuscated VBS Campaign Targeting Enterprise HR System TeamPCP’s Automated Supply Chain: From Trivy to LiteLLM in a Multi-Ecosystem Breach Iranian MOIS Leverages Telegram-Based C2 in Espionage Campaign Targeting Dissidents MuddyWater: Iran’s Adaptive Cyber Espionage Machine March 2026 Linux Patch Roundup

New Report

Critical Threat Research : The Iranian Cyber War Intensifies! Download the Report

Book a Demo Free Iranian Exposure Assessment

New Wave of QBot Attacks Detected via Malicious PDF Attachments

Threat Level – Red | Vulnerability Report

A new wave of QBot banking Trojan attacks was identified in April 2023, utilizing malicious PDF attachments in emails written in various languages.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox