1589 matches found
A New GoLang Botnet named GoTrim BruteForcing multiple CMS
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new GoTrim botnet has been scanning and brute-forcing on the four Content Management Systems WordPress, DataLife Engine, Joomla!, and OpenCart websites. GoTrim botnet is written in Go Programming...
Actors, Threats and Vulnerabilities 5 – 11 December 2022
...
Actors, Threats and Vulnerabilities 21 – 27 November 2022
...
The current cybersecurity challenge: All the threat data in the world, but no idea how to leverage it
Milpitas, California, August 05, 2022 -- Organizations today are facing a deluge of automated cybersecurity threats that are increasing exponentially every day, not only in velocity but in variety and complexity. This makes it virtually impossible for organizations to address every vulnerability...
Raspberry Robin worm infects Multiple Windows Network Devices
Threat Level Attack Report For a detailed advisory, download the pdf file here Summary The Raspberry Robin worm spreads via USB devices and shared folders to infect Windows installers and QNAP devices using compromised QNAP devices as stagers. Majority of the victims in Europe are being targeted...
FabricScape lets attackers takeover Linux containers
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary FabricScape, a container escape vulnerability in Microsoft Service Fabric could allow an attacker to escalate privileges and compromise the cluster...
Vulnerabilities & Threats that Matter 13 June – 19 June 2022
Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 798 53 1 109 4 13 For a detailed threat digest, download the pdf file here Summary The first week of June 2022 witnessed the discovery of 798 vulnerabilities out of which ...
Unauthenticated remote user can reset administrator password in Citrix ADM
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary An unauthorized remote user can corrupt the system which can lead to an administrator password reset to default on the next reboot...
Monthly Threat Digest: April 2022
...
Tesla, Guitar, and Cybersecurity
In the first episode of Unplugged Bytes, Sarfaraz Kazi welcomes Hugh Njemanze to share his interests in Tesla, guitar, and cybersecurity. Hugh is President a...
LAPSUS$ – New extortion group involved in the breach against Nvidia, Microsoft, Okta and Samsung
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Lapsus$ DEV-0537 is an extortion threat group that first appeared on December 10, 2021, and has since breached the Brazilian Ministry of Health, NVIDIA, Samsung, Vodafone, Ubisoft, Octa, and Microsoft. Unlike other extortionis...
Modernizing Vulnerability Management with Risk-Based Prioritization
...
Why VM Programs Suck
& From the Trenches This is the conversation I have with VM leads every week. It usually starts at minute thirty of a discovery call, after the official agenda is over and the Zoom faces relax. Someone says "can I be honest with you for a second?" — and then I get the list. Same complaints...
The Exploit Pipeline Just Went Autonomous.
& In February, I wrote about the breach zone — the gap between CVE disclosure and scanner signature. In April, I wrote that the breach zone became permanent when NIST stopped enriching the majority of CVEs. Both posts assumed the same ceiling: humans, working at human speed, are the bottleneck fo...
CSPM vs Exposure Management: Key Differences
Your CSPM tool flags 4,000 misconfigurations every month. Your team remediates 400. Attackers only need one. That gap between what your posture tools report and what actually puts your organization at risk is exactly where exposure management picks up. Book a demo to see how Hive Pro's Uni5 Xposu...
How to Present Cybersecurity ROI to Your Board of Directors
...
CTEM for Financial Services: Protect What Matters Most
Financial institutions process trillions of dollars in transactions every day. One exploited vulnerability can freeze operations, trigger regulatory penalties, and erode customer trust overnight. Traditional vulnerability management, which scans, scores, and queues patches, cannot keep pace with...
CTEM for Telecom Companies | Cybersecurity for Telecommunications
Protect Critical Infrastructure. Prevent Service Disruption. Secure Subscriber Data at Scale. Telecom companies operate some of the most complex, high-value attack surfaces in any industry. With billions of connected devices, legacy protocols like SS7 still in production, and 5G rollouts expandin...
The Backlog Became Policy
& In February, we called the gap between CVE disclosure and scanner signatures the "breach zone." On April 15, 2026, NIST made that gap permanent — and signatureless detection stopped being an advantage. It became a requirement. This post updates Attackers Don't Need Signatures. Neither Should Yo...
API Security Testing and Vulnerability Assessment
APIs now carry more sensitive data than traditional web interfaces. Payment details, health records, authentication tokens, and customer databases all flow through API endpoints that attackers can probe without ever touching a browser. A single misconfigured endpoint can expose millions of record...
5 Best Kenna Replacement Options to Consider
Attackers don't think in terms of isolated CVE scores. They look for the path of least resistance, chaining together multiple weaknesses across your entire attack surface to reach their goal. This is why the search for a Kenna replacement is so critical. It’s not just about finding a new tool to...
A Proactive Guide to Continuous Monitoring & Threat Detection
You’ve invested in a full stack of security tools, but how can you be sure they’re configured correctly and will actually work during an attack? Waiting for a real incident to test your defenses is a risk no one wants to take. This is why validating your security posture is so critical. It’s abou...
5 Best Cisco Vulnerability Management Replacements
The end-of-life announcement for Cisco Vulnerability Management formerly Kenna Security might feel like a disruption, but it’s actually a perfect opportunity to re-evaluate your entire security strategy. For years, teams have been stuck in a reactive cycle, chasing an endless list of CVEs with...
Threat Exposure Management vs. Legacy Scanners: A Clear Winner
Attackers don’t think in terms of CVSS scores. They think in terms of attack paths. They look for the weakest link—a misconfiguration here, an unpatched server there—that they can chain together to reach your most valuable assets. Traditional vulnerability scanners are completely blind to this...
What Is a Threat Exposure Management Platform? A Guide
For years, vulnerability management has been like a doctor treating symptoms without a diagnosis. You get a report full of issues—a high temperature here, a cough there—and you try to treat the most severe ones first. But you lack the context to understand the root cause. Are these symptoms...
What Is a “Next Generation” Vulnerability Management Solution?
You already know that running vulnerability scans is a fundamental part of cybersecurity. But what happens after the scan is finished? A long list of potential weaknesses without context is more overwhelming than helpful. A modern vulnerability management system goes far beyond simple scanning. I...
How BAS Helps Threat Exposure Management: A Complete Guide
Your vulnerability scanner just produced a report with hundreds of "critical" CVEs. Now what? For most security teams, this is where the guessing game begins. You know you can't fix everything at once, so you're forced to make tough calls based on CVSS scores and gut feelings, all while hoping yo...
7 Steps for Securing Generative AI in Enterprises
Think of your AI strategy like building a skyscraper. You wouldn't construct twenty floors and then try to figure out where the foundation should go. Security must be part of the blueprint from the very beginning. Bolting on security measures after an AI model is already in use is a recipe for...
LLM-Enabled Espionage : The AI assistant that moonlights as a mole
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. It began as a low-priority alert from the SOC: an AI assistant accessed an internal finance folder at 2:14 AM. No credentials were stolen. No...
What Is a Platform for Continuous Exposure Assessment?
You can’t protect what you don’t know you have. In an environment of sprawling cloud instances, remote endpoints, and shadow IT, gaining a complete and accurate picture of your attack surface is a massive challenge. Periodic scans only provide a snapshot in time, missing assets that spin up and...
Navigating the Cyber Threat Landscape in 2025: Key Insights for Security Leaders
2025 is half way done already and it has been evolving at an unprecedented pace, presenting new challenges and opportunities for security leaders. Last week, we launched The Hive Pro Cyber Horizons Annual Threat Report 2025. The report sheds light on the most pressing threats and offers actionabl...
The Exposure Convergence: Why Identity, Infrastructure, and Intelligence Are Converging
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. The cybersecurity industry is experiencing a fundamental convergence around "exposure management" ...
5 Cyber Trends That Should Be Shaping Your 2025 Security Strategy
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. 2024 was the year cyber threats got faster, smarter, and far more lethal. Ransomware groups became...
From Inventory to Influence: How CAASM Shifts Security’s Leverage
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Most security teams already know...
The Exposure Validation Revolution: From Hoping to Knowing
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on the Exposure Validation Revolution! Imagine your security team...
The Security-IT Deadlock: Breaking Free from Remediation Paralysis
Running short on time but still want to stay in the know? Well, we've got you covered! We've condensed all the key takeaways into a handy audio summary. So, if you're on the go, or just prefer listening over reading, click right here to hear it all! Security teams live in a peculiar reality. They...
Test Like an Attacker, Not an Auditor
Running short on time but still want to stay in the know? Well, we've got you covered! We've condensed all the key takeaways into a handy audio summary. So, if you're on the go, or just prefer listening over reading, click right here to hear it all! " Through 2028, validation of threat exposures ...
Critical OpenStack Vulnerability Exposes Cloud Data
...
Free Trials of Sticky Notes Installer Trojanized
...
DragonForce Unleashes Chaos with Leaked Lockbit Builder
...
Phoenix UEFI Firmware Flaw Exposes Multiple Intel CPUs to Risk
...
Deciphering LilacSquid’s Strategies for Long-Term Data Theft
...
Chained Flaws in Progress Telerik Report Server Enable Unauthenticated RCE
...
BIG-IP Next Central Manager Flaws Lead To Administrative Control
...
Summary of Vulnerabilities, Actors & Attacks: December 2023
...
The Unseen Thread Linking Sandman APT and KEYPLUG Backdoor
Summary: The Sandman Advanced Persistent Threat APT is closely linked to suspected threat clusters originating from China, specifically identified as Storm-0866, also known as Red Dev 40. Within the same victim environments, the Sandmans Lua-based malware, LuaDream, and the KEYPLUG backdoor have...
APT28’s Tactical Exploitation of Critical Vulnerabilities
Summary: The APT28 adversary, originating from Russia, has garnered notoriety through sophisticated phishing activities. By exploiting patched vulnerabilities as an initial access point, APT28 conducts extensive campaigns targeting diverse sectors, including government, aerospace, education,...
MOVEit Vulnerabilities Expose Organizations to Cyberattacks
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Critical SQL Injection vulnerabilities in Progress Softwares MOVEit Transfer product, exploited by Clop ransomware gang since May 2023, led to unauthorized access and data breaches, affecting...
Tsunami Botnet Preying on Insufficiently Shielded Linux SSH Servers
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary An ongoing hacking campaign has been targeting inadequately secured Linux SSH servers. The objective of this campaign is to deploy the Tsunami DDoS botnet. To receive real-time threat advisories, please...
Buhti Ransomware Operation Repurposes Leaked Encryptors
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Buhti ransomware, linked to Blacktail threat actors, employs leaked code of LockBit and Babuk variants. By exploiting vulnerabilities like PaperCut NG, they exfiltrate data and distribute ransomware. The...