Podcast: This Month's Threats in 10 Min! Emerging Threat Intel Audio Briefing - Listen & Defend Now →
Threat Advisories
Detailed information and guidance on threats and vulnerabilities, focusing on its characteristics, impact, and remediation steps, released daily and weekly to provide actionable intelligence and aid in rapid response and mitigation efforts.
Strengthen Your Defenses With the Latest Intelligence
Threat Level – Amber | Vulnerability Report
Malware Leveraging Google OAuth for Persistent Account Access
Information-stealing malware is actively exploiting an undisclosed Google OAuth endpoint called MultiLogin. January 5, 2024 Threat Level – Amber | Vulnerability Report
Nim Backdoor Masquerades as Nepal Government Security
Attackers employed malicious Microsoft Word documents disguised as official communications from the January 4, 2024 Threat Level – Red | Vulnerability Report
Zero-Day Authentication Bypass Exploit in Apache OFBiz
CVE-2023-51467 is a critical authentication bypass vulnerability in Apache OFBiz. Exploitation of January 3, 2024 Threat Level – Red | Vulnerability Report
Kimsuky Group’s Intriguing Exploits with AppleSeed Malware
The Kimsuky group has been actively utilizing weaponized LNK files to deploy January 3, 2024 Threat Level – Amber | Vulnerability Report
Terrapin Attack Downgrading the Fortresses of SSH
The Terrapin attack, a cryptographic exploit targeting the widely adopted SSH protocol, December 29, 2023 Threat Level – Red | Vulnerability Report
Barracuda Fixes ACE Zero-day Vulnerability Exploited by Attackers
The Barracuda Email Security Gateway vulnerability (CVE-2023-7102) allows remote attackers to execute December 29, 2023 Threat Level – Red | Vulnerability Report
UAC-0099 Utilizes WinRAR Exploit to Deploy LONEPAGE Malware
UAC-0099, a threat actor, has been involved in persistent attacks targeting Ukraine. December 29, 2023 Threat Level – Red | Vulnerability Report
Cloud Atlas Exploits Six-Year-Old Flaw to Target Russian Companies
The threat actor Cloud Atlas has been identified in spear-phishing attacks targeting Russian enterprises. December 28, 2023 HiveForce Labs Research At Your Fingertips
Stay informed with HiveForce Labs as they provide comprehensive insights into the latest vulnerabilities, threats, and threat actor activities.
Subscribe below to receive in-depth weekly and monthly updates, along with daily and weekly advisories designed to help you proactively manage and mitigate cybersecurity risks.
Subscribe Here