Threat Advisories:

Operation TrustTrap: APT36 Weaponizes 16,800 Spoofed Domains Patched but Not Cured: FIRESTARTER Backdoor Survives Cisco Firewall Upgrades The Gentlemen Ransomware: A Rapidly Scaling RaaS Threat Tropic Trooper Shifts Tradecraft to Open-Source Offensive Frameworks UNC6692 Social Engineering Campaign Deploying SNOW Malware Suite April 2026 Linux Patch Roundup LOTUSLITE v1.1: Enhanced Evasion Meets Banking-Themed Social Engineering Lotus Wiper: Silent Sabotage Targeting Venezuela’s Energy Sector Brand Hijack in Cybercrime: Who Is Pretending to Be ShinyHunters? Nexcorium: IoT Botnet Campaign Exploiting TBK DVR Devices CVE-2026-34197: Jolokia Exposure Enables RCE in ActiveMQ Inside the PHANTOMPULSE Social Engineering Kill Chain Payouts King Ransomware Blending In Before Breaking Through MCPwn: Critical Nginx UI Bug Opens the Door to Remote Control Microsoft’s April 2026 Patch Tuesday Storm-2755’s Silent Payroll Heist Targeting Canada From Advisory to Attack in Under 10 Hours: Marimo’s Critical RCE Flaw Handala Claims Destructive Wiper Attack on GCC Nation’s Critical Infrastructure Active Exploitation of Critical Adobe Prototype Pollution Flaw Masjesu: Exploit-Driven Botnet with Stealth, Scale, and Staying Power

New Report

Critical Threat Research : The Iranian Cyber War Intensifies! Download the Report

Book a Demo Free Iranian Exposure Assessment

UNC5537 Targeting Snowflake Users for Data Theft and Extortion

Threat Level – Red | Vulnerability Report

Summary:

UNC5537, a threat actor, targets Snowflake instances, focusing on data theft and extortion, exploiting weak authentication and VPN IPs. Snowflake customers should heed recent communications, as over 1,500 organizations are targeted. Proactive threat hunting and robust security measures are essential to safeguard against UNC5537’s sophisticated attacks.

Threat Level – Red | Attack Report

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox