Weekly Threat Digest : 1st DECEMBER to 7TH DECEMBER 2025

For a detailed threat digest, download the PDF file here

HiveForce Labs has reported a sharp rise in cybersecurity threats, highlighting the increasing complexity and frequency of global cyber incidents. Over the past week, ten major attacks were detected, one critical vulnerability was publicly disclosed, and one active threat actor group was monitored, signaling a concerning escalation in malicious activity.

One glaring example is a critical flaw in the King Addons for Elementor plugin (CVE-2025-8489), which allows attackers to silently grant themselves admin access on vulnerable WordPress sites. Despite a patch released in late September, exploitation surged almost immediately, with over 48,400 malicious attempts blocked. The bug’s simplicity, permitting anyone to register as an administrator without authentication, has made it a prime target, illustrating how quickly attackers rush to exploit unpatched software in the wild.

Meanwhile, threat actors are refining their tactics with more stealth and precision. MuddyWater has shifted from noisy operations to calculated espionage, using disguised games and trusted tools to infiltrate organizations in Israel and Egypt, deploying custom loaders, backdoors, and credential stealers. Similarly, Operation Hanoi Thief hides LOTUSHARVEST implants inside seemingly innocent resumes targeting Vietnamese IT and HR teams, while Water Saci spreads through WhatsApp with multi-stage Python-based loaders to deliver banking-focused backdoors. These campaigns underscore the urgent need for proactive updates, vigilant monitoring, and layered defenses to stay ahead of rapidly evolving cyber threats.

Subscribe to receive our weekly threat digests and alerts directly in your inbox.