Threat Advisories:

Google Races to Patch Chrome’s Sixth Zero-Day CVE-2025-10585 SilentSync RAT Hides in Plain Sight on PyPI Shai-Hulud: Massive npm Supply Chain Attack Infects Hundreds of Packages From Bookings to Breaches: RevengeHotels Latest Attacks on Hospitality BlackNevas Ransomware: A Rising Global Cyber Threat Yurei Ransomware Haunts the Digital World Like a Restless Spirit Click, Paste, Compromise: Inside the New FileFix Campaign Hive0154 Evolves with SnakeDisk and EnhancedToneshell Backdoor HybridPetya: A Bootkit-Enabled Ransomware Threat EvilAI Malware Exploits the Trust in Artificial Intelligence kkRAT Malware Campaign Targeting Chinese-Speaking Users ZynorRAT: Go-Based Malware Taking Shape on Telegram Microsoft September 2025 Patch Tuesday Roundup The Gentlemen Ransomware: A Rising Global Cyber Threat MostereRAT: A Deep Dive into an EPL-Backed Phishing Operation Stealerium Changing the Rules of Cyber Espionage s1ngularity Nx Supply Chain Attack: AI-Driven Credential Theft & Mass Exposure GPUGate: Weaponizing Ads and GitHub to Outsmart Sandboxes Cephalus Ransomware a Wake-Up Call for Stronger Endpoint Defense Sitecore Zero-Day Powers Reconnaissance Malware

Hive Force Labs: Critical Threats Affecting You This Week - 5 Minute Audio Intelligence Report

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

Zero-Day Exploit in 7-Zip Fuels SmokeLoader Attacks on Ukraine

Red | Vulnerability Report

A critical zero-day flaw in the 7-Zip archiver, tracked as CVE-2025-0411, has been actively exploited since September 2024. This vulnerability allows attackers to bypass Windows’ Mark of the Web (MotW) security feature, enabling the seamless execution of malicious files. Russian cybercrime groups actively leveraged this flaw in spear-phishing campaigns, using sophisticated homoglyph attacks to spoof document extensions. This tactic deceived users ultimately facilitating the delivery of SmokeLoader malware in targeted attacks.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox