Threat Advisories:

Operation Rewrite: How BadIIS Rewired the Web for SEO Poisoning Atomic Stealer Targeting Mac Users via Malicious GitHub Page Subtle Snail’s Silent Espionage Across Europe Gamaredon Tools Revive Turla’s Kazuar Backdoor to Target Ukraine Google Races to Patch Chrome’s Sixth Zero-Day CVE-2025-10585 SilentSync RAT Hides in Plain Sight on PyPI Shai-Hulud: Massive npm Supply Chain Attack Infects Hundreds of Packages From Bookings to Breaches: RevengeHotels Latest Attacks on Hospitality BlackNevas Ransomware: A Rising Global Cyber Threat Yurei Ransomware Haunts the Digital World Like a Restless Spirit Click, Paste, Compromise: Inside the New FileFix Campaign Hive0154 Evolves with SnakeDisk and EnhancedToneshell Backdoor HybridPetya: A Bootkit-Enabled Ransomware Threat EvilAI Malware Exploits the Trust in Artificial Intelligence kkRAT Malware Campaign Targeting Chinese-Speaking Users ZynorRAT: Go-Based Malware Taking Shape on Telegram Microsoft September 2025 Patch Tuesday Roundup The Gentlemen Ransomware: A Rising Global Cyber Threat MostereRAT: A Deep Dive into an EPL-Backed Phishing Operation Stealerium Changing the Rules of Cyber Espionage

Hive Force Labs: Critical Threats Affecting You This Week - 5 Minute Audio Intelligence Report

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

June 4, 2025

CISA Known Exploited Vulnerability Catalog – May 2025

For a detailed CISA’s KEV Catalog, download the pdf file here

Summary

The Known Exploited Vulnerability (KEV) catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild.

It is recommended that all organizations review and monitor the KEV catalog, prioritize remediation of listed vulnerabilities, and reduce the likelihood of compromise by threat actors. In May 2025, twenty five vulnerabilities met the criteria for inclusion in the CISA’s KEV catalog. Of these, seventeen are zero-day vulnerabilities; seven have been exploited by known threat actors and employed in attacks.

Recent Resources

Dive into our library of resources for expert insights, guides, and in-depth analysis on maximizing Uni5 Xposure’s capabilities

Hive Pro’s Gartner Recognition in the Hype Cycle for Security Operations 2025: What It Means for Security Leaders and the Future of Cybersecurity

Cybersecurity is a race against time, threat actors and attacks. And the industry’s wish has also come true, cybersecurity is

Geopolitical Aggression Trigger Digital Sabotage on Critical Infrastructure

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

From Fragments to Focused: How Acme Financial Elevated Its Cybersecurity with Hive Pro

In today’s complex threat landscape, even the most well-equipped organizations struggle with aligning tools, teams, and intelligence. Acme Financial (alias

Navigating the Cyber Threat Landscape in 2025: Key Insights for Security Leaders

2025 is half way done already and it has been evolving at an unprecedented pace, presenting new challenges and opportunities

Scattered Spider’s Strategic Hunt: Is Your Industry Next?

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

The Exposure Convergence: Why Identity, Infrastructure, and Intelligence Are Converging

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

Threat Exposure as a Narrative: If Attackers Tell a Story, Why Don’t We?

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

The Psychology of Exposure: Why Security Teams Ignore What’s Right in Front of Them

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

Book a demo and find out more about how Hive Pro can double your operational efficiency