Comprehensive Threat Exposure Management Platform
Critical Threat Research : Middle-East at WAR: The Rapidly Escalating Iranian Cyber Threat Download the Report Critical Threat Research : Middle-East at WAR: The Rapidly Escalating Iranian Cyber Threat Download the Report
For a detailed threat digest, download the PDF file here
HiveForce Labs has recently made significant advancements in identifying cybersecurity threats. Over the past week, seven major attacks were detected, six critical vulnerabilities were actively exploited, and two threat actors were closely monitored, reflecting an alarming escalation in malicious activities.
CVE-2026-23550 allows unauthenticated attackers to fully compromise WordPress sites via an actively exploited authentication bypass in the Modular DS Connector plugin. CVE-2025-64155 lets unauthenticated attackers fully compromise on-prem FortiSIEM systems, with active PoCs raising urgent exploitation risk.
Meanwhile, MuddyWater has advanced its attack tradecraft by adopting Rust-based implants and sophisticated delivery techniques, signaling a strategic evolution beyond its traditional PowerShell and VBS tooling. UAT-7290 conducts long-term espionage against telecom networks while repurposing compromised infrastructure as covert relays for broader China-aligned operations. These rising threats pose significant and immediate dangers to users worldwide.
Subscribe to receive our weekly threat digests and alerts directly in your inbox.
