Threat Advisories
Detailed information and guidance on threats and vulnerabilities, focusing on its characteristics, impact, and remediation steps, released daily and weekly to provide actionable intelligence and aid in rapid response and mitigation efforts.
Strengthen Your Defenses With the Latest Intelligence
Red | Vulnerability Report
Critical Firefox Flaw CVE-2025-2857 Lets Attackers Escape Sandbox
CVE-2025-2857 is a critical vulnerability in Mozilla Firefox for Windows, with a May 9, 2025 Red | Attack Report
Silent Escalation: CLFS Zero-Day Used in Targeted Attack
A U.S. organization was hit by a stealthy cyberattack linked to the May 9, 2025 Amber | Attack Report
Hiring Trap: Threat Actors Exploit Job Portals to Breach Corporate Systems
Venom Spider is launching a phishing campaign targeting HR departments. The attackers May 9, 2025 Red | Vulnerability Report
CVE-2025-3248 in Langflow Actively Exploited by Flodrix Botnet
CVE-2025-3248 is a critical RCE vulnerability in Langflow <1.3.0, caused by unsafe May 7, 2025 Amber | Attack Report
Operation Deceptive Prospect: RomCom’s New Social Engineering Playbook
In a malicious campaign dubbed Operation Deceptive Prospect, the RomCom threat group May 7, 2025 Amber | Attack Report
StealC V2: A Sharpened Blade in the Info-Stealing Arsenal
The notorious StealC malware has leveled up with its March 2025 update, May 7, 2025 Red | Vulnerability Report
Urgent Patch Required: Active Attacks Exploiting SonicWall SMA Vulnerabilities
SonicWall has confirmed that attackers are actively exploiting two vulnerabilities, CVE-2023-44221 and May 5, 2025 Red | Vulnerability Report
Web Shell Threat in Commvault: Patch CVE-2025-3928 Now
A high-severity vulnerability in Commvault’s Web Server (CVE-2025-3928) is now being actively May 2, 2025 HiveForce Labs Research At Your Fingertips
Stay informed with HiveForce Labs as they provide comprehensive insights into the latest vulnerabilities, threats, and threat actor activities.
Subscribe below to receive in-depth weekly and monthly updates, along with daily and weekly advisories designed to help you proactively manage and mitigate cybersecurity risks.
Subscribe Here