Weekly Threat Digest: 10 to 16 MARCH 2025

For a detailed threat digest, download the PDF file here

Summary

HiveForce Labs has identified a surge in cyber threats, with seven attacks executed, seventeen vulnerability uncovered, and three active adversaries exposed in the past week alone highlighting the relentless nature of cyberattacks.

HiveForce Labs has uncovered a surge in cyber threats, including an actively exploited zero-day vulnerability in Apple’s WebKit engine. Tracked as CVE-2025-24201, this flaw allows attackers to escape the Web Content sandbox using malicious web pages, enabling stealthy exploitation in the wild. Meanwhile, the SuperBlack ransomware, a modified LockBit 3.0 variant, is being deployed by the Mora_001 threat actor in aggressive double extortion campaigns.

Adding to the growing threat landscape, Blind Eagle, a cunning cybercriminal group, is leveraging CVE-2024-43451, a newly patched Windows flaw, to bypass defenses and compromise over 1,600 victims. This group isn’t just exploiting vulnerabilities it actively studies security fixes, striking before organizations can implement protections. These evolving threats underscore the urgency of timely patching, proactive defense strategies, and heightened cybersecurity awareness to counter the relentless wave of cyber exploitation.

Subscribe to receive our weekly threat digests and newsletters directly in your inbox.