Threat Advisories:

One Click to Compromise: Inside OpenClaw’s Critical RCE Flaw Attackers Hijack Open VSX Extensions to Spread GlassWorm Malware UAT-8099 Cybercrime Group Leverages BadIIS Ivanti Patches Actively Exploited EPMM Flaws CVE-2026-24858: Critical FortiCloud SSO Zero-day Under Active Exploitation TA584 and the Business of Breach: Selling Access at Scale Mustang Panda Enhances CoolClient for Stealth and Surveillance Instant Root Access via CVE-2026-24061: A Decade-Old Bug Comes Alive Gopher Strike and Sheet Attack Campaigns Targeting Indian Government January 2026 Linux Patch Roundup CVE-2026-21509: Microsoft Office Zero-Day Under Active Exploitation CVE-2026-20045: Critical Cisco Unified Communications Actively Exploited Evelyn Stealer’s Stealth Campaign Against Developers Malicious Chrome Extensions Hijacking Enterprise HR Platforms Geopolitics as Bait: LOTUSLITE Backdoor Targets U.S. Entities Admin Access Without Credentials Puts 40,000+ WordPress Sites at Risk Ni8mare in n8n: CVE-2026-21858 Bug Exposing 100,000 Servers to Risk VoidLink: A Cloud-Native Linux Framework Built for Stealth and Scale CVE-2025-64155: Critical FortiSIEM RCE with Public Exploits Available Microsoft’s January 2026 Patch Tuesday

Hive Pro recognized in Gartner® Magic Quadrant™ for Exposure Assessment Platform, 2025 Watch platform in action

Book a Demo Threat Digest - Subscribe

Tracing the Footprints of Agent Tesla’s Conspirators

Threat Level – Amber | Vulnerability Report

The Agent Tesla malware, classified as a remote access trojan (RAT), demonstrates remarkable proficiency in infiltrating systems to extract sensitive information like keystrokes and login credentials from web browsers and email clients. This facilitates unauthorized access for further malicious activities.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox