Threat Advisories:

Brand Hijack in Cybercrime: Who Is Pretending to Be ShinyHunters? Nexcorium: IoT Botnet Campaign Exploiting TBK DVR Devices CVE-2026-34197: Jolokia Exposure Enables RCE in ActiveMQ Inside the PHANTOMPULSE Social Engineering Kill Chain Payouts King Ransomware Blending In Before Breaking Through MCPwn: Critical Nginx UI Bug Opens the Door to Remote Control Microsoft’s April 2026 Patch Tuesday Storm-2755’s Silent Payroll Heist Targeting Canada From Advisory to Attack in Under 10 Hours: Marimo’s Critical RCE Flaw Handala Claims Destructive Wiper Attack on GCC Nation’s Critical Infrastructure Active Exploitation of Critical Adobe Prototype Pollution Flaw Masjesu: Exploit-Driven Botnet with Stealth, Scale, and Staying Power UAT-10362 Deploys LucidRook Malware Against Taiwanese NGOs Pawn Storm’s Dual Zero-Day Exploit Unleashed Important according to Google magic Iranian-Affiliated CyberAv3ngers Exploits Internet-Exposed PLCs in U.S. APT28 Exploits SOHO Routers for Large-Scale DNS Hijacking and Credential Theft Spraying for Access: Iran-Aligned Actors Turn Weak Credentials into Intelligence TrueConf Zero-Day Abused in Operation TrueChaos to Weaponize Software Updates Fortinet EMS Left Defenseless by CVE-2026-35616 Axios npm Supply Chain Attack: What You Need to Know

New Report

Critical Threat Research : The Iranian Cyber War Intensifies! Download the Report

Book a Demo Free Iranian Exposure Assessment

POC Exploit Code Released for Apache HugeGraph RCE Vulnerability

Threat Level – Red | Vulnerability Report

Summary:

CVE-2024-27348 is a critical RCE vulnerability in Apache HugeGraph-Server versions before 1.3.0. It allows attackers to remotely execute code by sending malicious Gremlin commands. Upgrading to version 1.3.0 and enabling authentication are recommended to mitigate this risk.

Threat Level – Red | Vulnerability Report

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox