Comprehensive Threat Exposure Management Platform
For a detailed threat digest, download the PDF file here
HiveForce Labs has reported a notable surge in global cyber threats, underscoring how both the volume and sophistication of attacks continue to escalate. In just the past week, observed nine significant attack incidents, the public disclosure of five new vulnerabilities, and operations linked to two threat actor groups. Together, these developments point to an increasingly volatile threat landscape, where organizations face mounting pressure to defend against faster, more complex, and more coordinated malicious activity.
A key driver behind this spike is the exploitation of several high-impact vulnerabilities, including active zero-day threats. CVE-2026-21509, a high-severity Microsoft Office security feature bypass, enables attackers to evade built-in OLE protections using specially crafted documents and has already been exploited in real-world attacks across multiple Office versions. Meanwhile, CVE-2026-24061 places organizations running vulnerable GNU InetUtils telnetd services at severe risk, as attackers can gain unauthenticated root access. Adding to the urgency, CVE-2026-24858, a critical authentication bypass flaw affecting several Fortinet products when FortiCloud SSO is enabled, allows attackers with any valid FortiCloud account to gain unauthorized administrative access to devices across organizations and has been exploited in the wild since mid-January 2026.
Threat actor activity has further amplified concerns, with a Pakistan-linked group conducting two concurrent cyber espionage campaigns, Gopher Strike and Sheet Attack, against Indian government entities. Additionally, initial access broker TA584 continues large-scale phishing operations, leveraging ClickFix social engineering to deliver malware such as Tsundere Bot and XWorm. Collectively, these developments reinforce the urgent need for rapid patch deployment, proactive monitoring, and layered defensive controls to keep pace with an increasingly aggressive and fast-moving threat environment.
Subscribe to receive our weekly threat digests and alerts directly in your inbox.
