Threat Advisories:
Hive Pro recognized in Gartner® Magic Quadrant™ for Exposure Assessment Platform, 2025 Watch platform in action
December 3, 2025

Weekly Threat Digest : 24th NOVEMBER to 30th NOVEMBER 2025

HiveForce Labs

HiveForce Labs

For a detailed threat digest, download the PDF file here




HiveForce Labs has recently made significant advancements in identifying cybersecurity threats. Over the past week, eight major attacks were detected, five critical vulnerabilities were actively exploited, and one threat actor was closely monitored, reflecting an alarming escalation in malicious activities.

Cl0p ransomware has evolved into 2025’s most aggressive extortion force, weaponizing zero-days for rapid, automated data theft at massive scale, forcing defenders to prioritize fast patching, tight segmentation, and rigorous exfiltration monitoring. ShadowRay 2.0 exposes how rapidly cybercriminals are weaponizing AI-era infrastructure, turning misconfigured Ray clusters into stealthy, self-spreading engines for cryptomining, data theft, and botnet expansion, underscoring the urgency of hardening access and visibility across modern AI stacks.

Additionally, ClickFix turns a single misguided “update” click into a stealthy, steganography-driven infection chain, proving that even advanced attacks still rely on basic user trust to succeed. Shai-Hulud 2.0 weaponizes npm’s supply chain at scale, using poisoned preinstall scripts and stolen tokens to self-propagate, turning routine package installs into a destructive breach that demands urgent secret rotation and dependency audits. These rising threats pose significant and immediate dangers to users worldwide.



Subscribe to receive our weekly threat digests and alerts directly in your inbox.

Recent Resources

Dive into our library of resources for expert insights, guides, and in-depth analysis on maximizing Uni5 Xposure’s capabilities

Book a demo and find out more about how Hive Pro can double your operational efficiency

Book a Demo