Threat Advisories:

Mini Shai-Hulud npm Supply Chain Worm: TanStack and Multi-Ecosystem Compromise Malicious Ruby Gems Fuel GemStuffer Data Theft Campaign Microsoft’s May 2026 Patch Tuesday PCPJack Hijacks Vulnerable Servers With Worm-Like Cloud Propagation Tactics QLNX Unmasked: Advanced Linux Malware Targets Developers and Cloud Infrastructure Dirty Frag A 2017 Optimization That Aged Into a Root Exploit TCLBanker: Trojanized Logitech Installer Fuels Banking Malware Campaign Ivanti EPMM Flaws Threaten Enterprise Device Management Systems Is Your Spring Config Server an Open Door? CVE-2026-40982 Says Yes PAN-OS Buffer Overflow Flaw Under Active State-Sponsored Exploitation Unauthenticated RCE in Weaver E-cology Actively Exploited Tax Trap to Full Takeover: Inside the Silver Fox Multi-Stage Intrusion Chain One Script, Every Distro, Full Root: Copy Fail Vulnerability Rewriting Linux Threat Models CVE-2026-42208: The LiteLLM Flaw Letting Attackers Reach Deep Inside VECT Ransomware: Flawed Encryption Turns RaaS Locker into Irreversible File Wiper Operation TrustTrap: APT36 Weaponizes 16,800 Spoofed Domains Patched but Not Cured: FIRESTARTER Backdoor Survives Cisco Firewall Upgrades The Gentlemen Ransomware: A Rapidly Scaling RaaS Threat Tropic Trooper Shifts Tradecraft to Open-Source Offensive Frameworks UNC6692 Social Engineering Campaign Deploying SNOW Malware Suite

New Report

Critical Threat Research : The Iranian Cyber War Intensifies! Download the Report

Book a Demo Free Iranian Exposure Assessment

VMware ESXi’s Fatal Flaw CVE-2024-37085 Opens Doors for Ransomware Havoc

Red | Vulnerability Report

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox