Weekly Threat Digest : 18 AUGUST to 24 AUGUST 2025

For a detailed threat digest, download the PDF file here

HiveForce Labs has observed a significant surge in cybersecurity threats, underscoring the growing complexity and frequency of cyber incidents. Over the past week, seven major attacks were detected, two critical vulnerabilities were actively exploited, and one threat actor groups were closely monitored, reflecting an alarming escalation in malicious activities.

Among the most concerning findings was CVE-2025-43300, a zero-day flaw in Apple’s Image I/O framework that enables remote code execution through a maliciously crafted image file, requiring little to no user interaction. Another active exploit tracked was CVE-2018-0171, a long-standing vulnerability in Cisco IOS Smart Install, abused by Static Tundra, a Russian state-backed espionage group, to extract device configurations and sensitive credentials, an example of how older flaws remain valuable tools in state-driven operations.

Adding to the complexity, the Crypto24 ransomware family has rapidly matured since late 2024, expanding into a global threat against critical industries across Asia, Europe, and the U.S. Its operators blend legitimate IT tools with custom-built malware to maximize disruption and evade detection. At the same time, the GodRAT campaign demonstrates how legacy malware families like Gh0st RAT continue to resurface in new forms. GodRAT blends stealth, modular functionality, and data theft into an attack chain tailored for industries like finance. Together, these developments illustrate a mounting wave of cyber aggression, underscoring the urgent need for resilience, proactive defense, and swift patch management in the face of evolving digital threats.

These rising threats represent an immediate and global cybersecurity risk.

Subscribe to receive our weekly threat digests and alerts directly in your inbox.