Threat Advisories:

Transparent Tribe Targets India’s Startup Ecosystem with Crimson RAT Amaranth-Dragon: Low Noise, High Impact Espionage in Southeast Asia Web Traffic Hijacking via Malicious NGINX Configuration Injection DEAD#VAX: AsyncRAT Deployment via IPFS-Hosted VHD Phishing Operation Neusploit: APT28 Weaponizes CVE-2026-21509 Chrysalis Backdoor: A Quiet Passenger in Notepad++ Updates One Click to Compromise: Inside OpenClaw’s Critical RCE Flaw Attackers Hijack Open VSX Extensions to Spread GlassWorm Malware UAT-8099 Cybercrime Group Leverages BadIIS Ivanti Patches Actively Exploited EPMM Flaws CVE-2026-24858: Critical FortiCloud SSO Zero-day Under Active Exploitation TA584 and the Business of Breach: Selling Access at Scale Mustang Panda Enhances CoolClient for Stealth and Surveillance Instant Root Access via CVE-2026-24061: A Decade-Old Bug Comes Alive Gopher Strike and Sheet Attack Campaigns Targeting Indian Government January 2026 Linux Patch Roundup CVE-2026-21509: Microsoft Office Zero-Day Under Active Exploitation CVE-2026-20045: Critical Cisco Unified Communications Actively Exploited Evelyn Stealer’s Stealth Campaign Against Developers Malicious Chrome Extensions Hijacking Enterprise HR Platforms

Hive Pro recognized in Gartner® Magic Quadrant™ for Exposure Assessment Platform, 2025 Watch platform in action

Book a Demo Threat Digest - Subscribe

February 5, 2026

CISA Known Exploited Vulnerability Catalog – January 2026

HiveForce Labs

HiveForce Labs

For a detailed CISA’s KEV Catalog, download the pdf file here

Summary

The Known Exploited Vulnerability (KEV) catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild.

It is recommended that all organizations review and monitor the KEV catalog, prioritize remediation of listed vulnerabilities, and reduce the likelihood of compromise by threat actors. In January 2026, 17 vulnerabilities met the criteria for inclusion in the CISA’s KEV catalog. Of these, seven are zero-day vulnerabilities; one has been exploited by a threat actor and employed in attacks.

Recent Resources

Dive into our library of resources for expert insights, guides, and in-depth analysis on maximizing Uni5 Xposure’s capabilities

Rapid7 vs. Hive Pro: A Head-to-Head Comparison

See how Rapid7 and Hive Pro compare in features, setup, pricing, and threat intelligence to help you choose the right

Security analyst monitoring for a Chrome zero-day vulnerability on a computer screen.

Chrome Zero-Day Vulnerability: Are You Protected?

Learn what a Chrome zero-day vulnerability is, how it threatens your security, and get practical steps to protect your data and systems from active exploits.

Don’t Just Replace Kenna- Evolve to Vulnerability Exposure Management

Cisco has announced the end-of-sale for Cisco Vulnerability Management (formerly Kenna Security), leaving security teams with a critical decision: remain

A CISO reviews the ultimate CISO dashboard, viewing all security vulnerabilities in a single place.

The Ultimate CISO Dashboard: A Complete Guide

The Ultimate CISO Dashboard (viewing all vulnerabilities in a single place) helps security leaders track, prioritize, and communicate cyber risk with clarity.

Analyst in a control room tracks the top 10 threat actors on a world map.

Top 10 Threat Actors: Their Tactics & Motivations

Get to know the top 10 threat actors, their tactics, and motivations so you can strengthen your cybersecurity strategy and protect your organization.

Cybersecurity analyst managing threat exposure on multiple screens in a security control room.

What Is Exposure Management Cybersecurity? A Guide

Get a clear, practical overview of exposure management cybersecurity, with actionable steps to identify, prioritize, and reduce your organization’s real risks.

Comparing vulnerability management dashboards to replace Cisco Kenna with Hive Pro.

Why Replace Kenna with Hive Pro? A Full Comparison

See why security teams choose to replace Kenna (cisco vulnerability management) with Hive Pro for better threat exposure management and real-world risk insights.

Security team using a Breach and Attack Simulation (BAS) platform to monitor for cyber threats.

What is Breach and Attack Simulation (BAS)? A Guide

Breach and Attack Simulation (BAS) helps you test your security controls with automated, real-world attack scenarios for stronger cyber defense.

Book a demo and find out more about how Hive Pro can double your operational efficiency