Comprehensive Threat Exposure Management Platform
Critical Threat Research : Middle-East at WAR: The Rapidly Escalating Iranian Cyber Threat Download the Report Critical Threat Research : Middle-East at WAR: The Rapidly Escalating Iranian Cyber Threat Download the Report
For a detailed threat digest, download the PDF file here
HiveForce Labs has flagged a worrying surge in cyber activity, underscoring how global threats are growing both faster and more complex. In the past week, we tracked three significant attacks alongside two critical vulnerabilities, clear signs that adversaries are accelerating their operations and expanding their reach across sectors and regions.
At the vulnerability level, Cisco environments have come under strain. CVE-2026-20045 exposes multiple Cisco Unified Communications products to unauthenticated remote code execution through flawed input validation, with active exploitation already observed against internet-facing systems to gain OS-level access. Even more severe, CVE-2025-20393 is a CVSS 10.0 zero-day in Cisco AsyncOS affecting Secure Email Gateway and management appliances, enabling attackers to execute commands as root via the Spam Quarantine interface. This flaw has been exploited since late November 2025; Cisco released patches on January 15, 2026, and urged immediate upgrades.
Beyond vulnerabilities, several highly orchestrated attack campaigns reveal how threat actors are abusing trust rather than code. One espionage operation leverages U.S.-Venezuela political tensions to deliver the stealthy LOTUSLITE backdoor via DLL sideloading, while other targets are developers through trojanized Visual Studio Code extensions to deploy the Evelyn Stealer. A separate multi-stage campaign shows how complete system compromise can be achieved without a single exploit using social engineering, cloud-hosted payloads, Defender abuse via Defendnot, and ultimately Amnesia RAT for long-term surveillance and data theft before ransomware locks victims out. Taken together, these developments reinforce a simple reality: rapid patching, continuous visibility, and layered defenses are no longer optional in an increasingly aggressive threat landscape.
Subscribe to receive our weekly threat digests and alerts directly in your inbox.
