Threat Advisories:

Geopolitics as Bait: LOTUSLITE Backdoor Targets U.S. Entities Admin Access Without Credentials Puts 40,000+ WordPress Sites at Risk Ni8mare in n8n: CVE-2026-21858 Bug Exposing 100,000 Servers to Risk VoidLink: A Cloud-Native Linux Framework Built for Stealth and Scale CVE-2025-64155: Critical FortiSIEM RCE with Public Exploits Available Microsoft’s January 2026 Patch Tuesday AsyncRAT Behind the Cloudflare Curtain Chinese APT Espionage Turns Telecom Systems Into Covert Relay Nodes MuddyWater’s Rust Implants Target the Middle East CVE-2025-37164: Critical RCE in HPE OneView Under Active Exploitation Astaroth Reimagined: Weaponizing WhatsApp for Scalable Banking Fraud GoBruteforcer Exposed: How Weak Credentials Power a Silent Linux Botnet CVE-2026-0625: A Decade-Long Risk in D-Link DSL Routers Enabling Full System Compromise PHALT#BLYX: Fake BSOD Campaign Targets Hospitality CVE-2025-13915: Authentication Bypass Puts IBM API Connect at Risk VVS Stealer Exposed: Inside a Stealthy Discord Credential Theft Operation Silent Clicks, Lasting Access: APT36’s Fileless Espionage Playbook GlassWorm’s Quiet Infiltration of Mac Systems Silver Fox Slips ValleyRAT Into India Through Fake Tax Notices LangGrinch: Critical LangChain Serialization Flaws Enable Secret Exfiltration

Hive Pro recognized in Gartner® Magic Quadrant™ for Exposure Assessment Platform, 2025 Watch platform in action

Book a Demo Threat Digest - Subscribe

Vulnerability in WordPress Plugin threatens Website takeover

Threat Level – Red | Vulnerability Report

WordPress Ultimate Member Plugin, with over 200K installations helps in streamlining user registration and login processes. It has been found vulnerable to unauthenticated privilege escalation, posing a potential risk of website takeover by attackers.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox