Threat Advisories:

Hidden in Plain Sight: The Abuse of Nezha and the Ghost RAT That Followed UTA0388: AI-Powered Targeted Operations Leveraging GOVERSHELL Zimbra Zero-Day Hidden in “Harmless” ICS File Targets Military Service Finder Plugin Flaw Opens Door to Full Site Compromise Redis Under Siege: RediShell Flaw Opens Door to Remote Code Execution CVE-2025-61882: Oracle EBS Zero-Day Actively Exploited in the Wild Water Saci: Brazil’s WhatsApp-Borne Malware Storm Confucius Hackers Spy on Critical Sectors Using AnonDoor FunkLocker: Emerging AI-Assisted Ransomware Olymp Loader: Modular Malware Built for Rapid Exploitation VMware Aria and Tools Vulnerabilities Fixed Amid Ongoing Exploitation DarkCloud Rising: Spear-Phishing Campaign Targets Manufacturing Sector Active Zero-Day Exploitation on Cisco ASA and FTD Devices BRICKSTORM Malware Quietly Builds the Perfect Hideout in US Networks September 2025 Linux Patch Roundup COLDRIVER’s ClickFix Campaign Targets Civil Voices Critical Cisco SNMP Flaw Exploited: Root Access at Risk DeerStealer the $200 Doorway to Your Digital Secrets Operation Rewrite: How BadIIS Rewired the Web for SEO Poisoning Atomic Stealer Targeting Mac Users via Malicious GitHub Page

Hive Force Labs: October First Threat Research

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

Shield Your Site: WordPress Houzez Theme and Plugin Flaws Uncovered

Amber | Vulnerability Report

WordPress has released patches for two critical vulnerabilities in its Houzez theme and Houzez Login Register plugin, identified as CVE-2024-22303 and CVE-2024-21743. These vulnerabilities allow for privilege escalation, enabling malicious actors to elevate their access from low-privileged accounts to higher privileges, which poses a significant security risk. Users are strongly advised to update to the latest versions of the theme and plugin to safeguard their sites against potential exploitation.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox