Critical Threat Research : The Iranian Cyber War Intensifies!
Comprehensive Threat Exposure Management Platform
For a detailed threat digest, download the PDF file here
HiveForce Labs has reported a sharp rise in cybersecurity threats, highlighting the increasing complexity and frequency of global cyber incidents. Over the past week, nine major attacks were detected, ten critical vulnerabilities were publicly disclosed, and three active threat actor groups were monitored, signaling a concerning escalation in malicious activity.
Fortinet has released emergency patches for a critical vulnerability in FortiClient EMS, confirming that the flaw is already under active exploitation. Tracked as CVE-2026-35616, the issue affects the system’s API that handles communication between the EMS server and managed endpoints, raising serious concerns that centralized security control could become an attack surface.
At the same time, multiple zero-day campaigns are unfolding in parallel. The TrueConf Windows client vulnerability (CVE-2026-3502) is being exploited in Operation TrueChaos, a targeted campaign against government entities in Southeast Asia. In a separate but equally sophisticated effort, Pawn Storm (APT28) is leveraging chained zero-day exploits to transform a single user interaction into a full-scale breach, silently infiltrating high-value Ukrainian and NATO-linked networks.
Beyond targeted intrusions, large-scale threats continue to expand. Masjesu, a commercially operated IoT botnet, is being actively marketed as a DDoS-for-hire service via Telegram. These underscore the need for disciplined security updates and sustained monitoring in response to rapidly evolving attack methodologies.
Subscribe to receive our weekly threat digests and alerts directly in your inbox.
