Threat Advisories:

GhostRedirector Targets Windows Servers Globally for SEO Fraud CVE-2025-55177: WhatsApp Zero-Click Flaw Used in Targeted Campaigns Experimental AI Ransomware PromptLock Sparks Security Concerns NightSpire Ransomware Expands Reach with Aggressive Extortion Deadlines Operation HanKook Phantom: APT37’s Stealthy Espionage Campaign Storm-0501’s Shift to Cloud-Native Ransomware Salt Typhoon Cyber Attacks Hit 200 Organizations in the United States CVE-2025-7775: Actively Exploited Critical Flaw in Citrix NetScaler ZipLine Campaign Spins Web Around U.S. Supply Chain Manufacturers with MixShell August 2025 Linux Patch Roundup New SHAMOS Stealer Exploits One-Line Commands on macOS QuirkyLoader: A Silent Enabler of Modern Malware Families CVE-2025-43300: Zero-Day in Apple Image I/O Exploited in Targeted Attacks Static Tundra Fuels Espionage Campaigns Through an Old Cisco Bug Crypto24 Ransomware Disrupts Businesses Using Custom EDR Bypass GodRAT Reloaded: Legacy Code, Modern Tactics Noodlophile Stealer Advances with Obfuscation, Social Media Deception PS1Bot: The Modular Malware Lurking Behind Malvertising Microsoft’s August 2025 Patch Tuesday Roundup Charon Ransomware Encrypts Files Belonging to Middle East Industries

Hive Force Labs: Critical Threats Affecting You This Week - 5 Minute Audio Intelligence Report

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

September 3, 2025

CISA Known Exploited Vulnerability Catalog – August 2025

For a detailed CISA’s KEV Catalog, download the pdf file here

—

Summary

The Known Exploited Vulnerability (KEV) catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild.

It is recommended that all organizations review and monitor the KEV catalog, prioritize remediation of listed vulnerabilities, and reduce the likelihood of compromise by threat actors. In August 2025, fifteen vulnerabilities met the criteria for inclusion in the CISA’s KEV catalog. Of these, seven are zero-day vulnerabilities; one has been exploited by known threat actors and employed in attacks.

Recent Resources

Dive into our library of resources for expert insights, guides, and in-depth analysis on maximizing Uni5 Xposure’s capabilities

Hive Pro’s Gartner Recognition in the Hype Cycle for Security Operations 2025: What It Means for Security Leaders and the Future of Cybersecurity

Cybersecurity is a race against time, threat actors and attacks. And the industry’s wish has also come true, cybersecurity is

Geopolitical Aggression Trigger Digital Sabotage on Critical Infrastructure

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

From Fragments to Focused: How Acme Financial Elevated Its Cybersecurity with Hive Pro

In today’s complex threat landscape, even the most well-equipped organizations struggle with aligning tools, teams, and intelligence. Acme Financial (alias

Navigating the Cyber Threat Landscape in 2025: Key Insights for Security Leaders

2025 is half way done already and it has been evolving at an unprecedented pace, presenting new challenges and opportunities

Scattered Spider’s Strategic Hunt: Is Your Industry Next?

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

The Exposure Convergence: Why Identity, Infrastructure, and Intelligence Are Converging

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

Threat Exposure as a Narrative: If Attackers Tell a Story, Why Don’t We?

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

The Psychology of Exposure: Why Security Teams Ignore What’s Right in Front of Them

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

Book a demo and find out more about how Hive Pro can double your operational efficiency