1589 matches found
Actors, Threats and Vulnerabilities 12 – 18 December 2022
...
Vulnerabilities & Threats that Matter 10-16 October 2022
...
Adobe addresses new vulnerabilities in Adobe Acrobat and Reader
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary Adobe addresses multiple critical vulnerabilities as per Adobe and has released security updates for Adobe Acrobat and Reader for Windows and macOS...
Unauthenticated remote user can reset administrator password in Citrix ADM
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary An unauthorized remote user can corrupt the system which can lead to an administrator password reset to default on the next reboot...
LAPSUS$ – New extortion group involved in the breach against Nvidia, Microsoft, Okta and Samsung
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Lapsus$ DEV-0537 is an extortion threat group that first appeared on December 10, 2021, and has since breached the Brazilian Ministry of Health, NVIDIA, Samsung, Vodafone, Ubisoft, Octa, and Microsoft. Unlike other extortionis...
Mustang Panda targets European diplomats using enhanced PlugX backdoor
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Mustang Panda, a Chinese cyberespionage group, has been targeting European diplomats with a revised version of the PlugX backdoor in an ongoing campaign linked to the ongoing conflict in Ukraine. The group, also known as...
What Is a Risk-Based Vulnerability Management Tool?
Your security team is talented, but they aren't miracle workers. With a persistent skills shortage and ever-tightening budgets, asking them to patch every single vulnerability is not just unrealistic; it's inefficient. Chasing low-risk issues wastes valuable time and leads to burnout, all while...
What is CTEM? A Guide to Proactive Cybersecurity
Most security teams are great at finding problems. The real challenge is figuring out which problems to solve first. When everything is a priority, nothing is. This is a common frustration that leaves teams feeling overworked and unsure if their efforts are making a real difference. A more...
6 Best Exposure Management Cybersecurity Platforms
How do you know if your security controls will actually stop an attack? You can have the best firewalls and endpoint protection on the market, but misconfigurations or undiscovered assets can render them useless. This is the fundamental question that traditional vulnerability management can't...
What is Breach and Attack Simulation (BAS)? A Guide
If you’re on a vulnerability management team, you’re likely drowning in a sea of CVEs. Your scanners produce massive lists of potential weaknesses, but with limited time and resources, which ones do you fix first? A high CVSS score doesn't always translate to real-world risk. You need context to...
Vulnerability Management vs Exposure Management: The Next Step
An attacker doesn’t care about your long list of CVEs or your internal CVSS scores. They care about finding a single path into your network. This is the fundamental idea that separates the old way of thinking from the new. The discussion around vulnerability management vs exposure management is...
What Is a Threat Exposure Management Platform? A Guide
For years, vulnerability management has been like a doctor treating symptoms without a diagnosis. You get a report full of issues—a high temperature here, a cough there—and you try to treat the most severe ones first. But you lack the context to understand the root cause. Are these symptoms...
What is Continuous Threat Exposure Management? A Guide For CISOs and Vulnerability Teams
Traditional vulnerability management has taught us to look for weaknesses inside our own walls. But what if we flipped the script and started looking at our defenses from the outside in, just like an attacker does? Attackers don't care about CVSS scores; they care about pathways. They look for th...
What Is Threat Exposure Management? A CISO’s Guide
Trying to secure your organization without understanding an attacker’s perspective is like trying to defend a castle without knowing where the enemy will strike. You can patch walls all day, but you might miss the one weak spot they’re planning to exploit. Threat exposure management gives you tha...
Inside Hive Pro: A Complete Platform Review
Knowing you have a vulnerability is one thing; knowing if you’re truly exposed is another. A critical vulnerability might exist on a server, but can an attacker actually reach it? Will your firewall block the attempt? Will your EDR detect the payload? Traditional vulnerability management can't...
What is CTEM? Your Guide to Reducing Cyber Risk
Trying to explain security priorities to your board using CVSS scores is a tough sell. A long list of technical flaws doesn't translate to business impact, making it difficult to justify budgets and get buy-in for critical initiatives. Security leaders need a better way to frame the conversation...
A Guide to Exposure Management Cybersecurity Best Practices
Attackers don't think in terms of CVE scores. They look for the path of least resistance, whether it's a forgotten server, a misconfigured cloud bucket, or an exposed API. While your team is busy prioritizing a long list of software flaws, a real threat could be exploiting a simple oversight that...
Strategic Benefits of Vulnerability Prioritization
Think of your security team as the staff in a hospital emergency room. They can't treat every patient at once, so they perform triage, focusing on the most critical cases first to save lives. Vulnerability prioritization is security triage. Your organization has a seemingly endless list of...
The 7 Best Continuous Threat Exposure Management Tools
If your security team is drowning in a sea of "critical" alerts from your vulnerability scanner, you know the feeling of being busy without being effective. You spend all your time triaging and patching, but you never feel like you're actually ahead of the attackers. This is the core problem that...
What Is Attack Surface Mapping And Why It’s Critical To your Security Program
You might think an attack surface mapper is just another name for a vulnerability scanner, but they serve two very different purposes. A scanner tests the assets you already know about for specific weaknesses. An attack surface mapper answers a more fundamental question: What assets do I even hav...
What Are Attack Surface Intelligence Exposures?
Do you know every single digital asset your organization owns? For most security leaders, the honest answer is no. Between shadow IT, forgotten development servers, and complex cloud environments, your true attack surface is full of blind spots. These unknown and unmanaged assets are where...
Houston CISO Meetup: The Strategic Shift from Mass Vulnerability Scanning to Proactive Exposure Reduction
Key takeaways from a CISO dinner with Al Lindseth and Hive Pro's Critt Golden. If you were one of the many CISO’s, CIO’s or cybersecurity leaders who joined our Threat Exposure Management dinner at Del Frisco’s Steak House in Houston yesterday, thank you for joining an oversold event! If you didn...
From AI to Zero-Days: Why CISOs Can’t Ignore the 2024 Threat Shifts
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Two weeks ago, we published the key insights from our Cyber Horizons 2025 Threat Report ,...
5 Cyber Trends That Should Be Shaping Your 2025 Security Strategy
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. 2024 was the year cyber threats got faster, smarter, and far more lethal. Ransomware groups became...
ARM’s Zero-Day Flaw Leads to Improper GPU Memory Processing
...
BIG-IP Next Central Manager Flaws Lead To Administrative Control
...
LockBit Ransomware Evolving Tactics and Pervasive Impact in 2023
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary LockBit ransomware is a highly impactful Ransomware-as-a-Service RaaS variant that targets critical sectors globally. Since 2020, victims in the US alone have paid around $91 million in ransom payments...
Actors, Threats and Vulnerabilities 17 to 23 April 2023
For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, they identified a total of ten attacks that were executed...
ArtemisPro – Solution Overview
In this video, Anand Choudha, CEO at Hive Pro, and Jeelan Poola, CPO at Hive Pro, introduce the HivePro Uni5 Threat Exposure Management Platform. HivePro Uni...
Rilide Stealer Extension Targets Chromium-Based Browsers
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Rilide Stealer Extension is a sophisticated malware that disguises itself as a benign Google Drive extension and targets Chromium-based browsers. To receive real-time threat advisories, please follow...
SideCopy APT Launches Phishing Campaign Against Indian Government
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary The new malicious activity of the SideCopy threat actors is the attack campaign STEPPYKAVACH, which was notably active in 2021 and was originally related to Pakistan. The most recent malicious attack...
Vulnerabilities & Threats that Matter 31 October- 06 November 2022
...
FabricScape lets attackers takeover Linux containers
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary FabricScape, a container escape vulnerability in Microsoft Service Fabric could allow an attacker to escalate privileges and compromise the cluster...
Vulnerabilities & Threats that Matter 13 June – 19 June 2022
Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 798 53 1 109 4 13 For a detailed threat digest, download the pdf file here Summary The first week of June 2022 witnessed the discovery of 798 vulnerabilities out of which ...
Stable Channel Update in Chrome for Windows, Mac and Linux
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary A list of security fixes has been addressed in the latest version for Windows, Mac and Linux. There are seven security fixes of which four are high severity vulnerabilities as per Chrome. These...
A zero-day vulnerability in Atlassian Confluence
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary The Cybersecurity and Infrastructure Security Agency CISA has warned organizations about a new vulnerability in Atlassians Confluence Server and Data Center. This vulnerability is actively exploited in t...
Tesla, Guitar, and Cybersecurity
In the first episode of Unplugged Bytes, Sarfaraz Kazi welcomes Hugh Njemanze to share his interests in Tesla, guitar, and cybersecurity. Hugh is President a...
Benefits of Breach and Attack Simulation in Vulnerability Management
Vulnerability management teams face an overwhelming challenge: tens of thousands of CVEs published annually, limited remediation capacity, and no reliable way to separate genuine threats from background noise. Traditional approaches rely on CVSS scores and scanner output, but these methods lack t...
Uni5 Xposure: The Complete CTEM Platform for Proactive Threat Exposure Management
Stop Reacting to Threats. Start Eliminating Exposure. Uni5 Xposure is the only platform that operationalizes all 5 stages of Gartner's CTEM framework, cutting remediation time by 70% and reducing threat exposure by 80%. To see these capabilities in action, explore the Uni5 Xposure platform and it...
What Is a Risk-Based Vulnerability Management Platform?
A vulnerability scanner tells you where the cracks are in your defenses, but it doesn't tell you which ones an attacker will actually use. To truly understand your exposure, you need to see your network from their perspective. How can a low-severity flaw on one server be combined with a...
Vulnerability Remediation: The Complete Guide to Fixing Security Weaknesses
Your scanners find thousands of vulnerabilities every cycle. Your team triages, assigns, and patches what they can. But weeks later, the same critical CVEs still sit open, SLAs blow past their deadlines, and the backlog keeps growing. The problem is rarely a lack of detection. It is a broken...
Rapid7 vs. Hive Pro: A Head-to-Head Comparison
Threat intelligence and Business context are the secret sauces that transform vulnerability management from a frantic game of whack-a-mole into a strategic, focused risk management and security practice. Without it, you’re just staring at a massive list of vulnerabilities with little to no contex...
How BAS Improves Vulnerability Management (And Why)
A vulnerability without context is just a data point. A medium-severity flaw might seem like a low priority, but what if you knew it was being actively used in a new ransomware campaign targeting your industry? This is why threat intelligence is so crucial. The answer to how does BAS improve...
The 5 Stages of Continuous Threat Exposure Management
Attackers don’t care about your compliance reports or the sheer number of vulnerabilities you have. They look for a single, exploitable path to your most valuable assets. To defend effectively, you need to see your organization through their eyes. This is the core principle behind continuous thre...
CISA Known Exploited Vulnerabilities May 2025: A Guide
Your vulnerability management backlog is probably overflowing. With thousands of new CVEs disclosed every year, it’s impossible to patch everything, and trying to do so leads to burnout and wasted effort. The CISA KEV catalog is the answer to this overwhelming noise. It’s not just another list of...
Geopolitical Aggression Trigger Digital Sabotage on Critical Infrastructure
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. The modern battlefield isn't just on the ground; it's online, and the digital front continues to...
Navigating the Cyber Threat Landscape in 2025: Key Insights for Security Leaders
2025 is half way done already and it has been evolving at an unprecedented pace, presenting new challenges and opportunities for security leaders. Last week, we launched The Hive Pro Cyber Horizons Annual Threat Report 2025. The report sheds light on the most pressing threats and offers actionabl...
Threat Exposure as a Narrative: If Attackers Tell a Story, Why Don’t We?
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Security teams are losing the communication battle to cybercriminals who intuitively understand...
The Psychology of Exposure: Why Security Teams Ignore What’s Right in Front of Them
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Your security team sees everything and notices nothing. Drowning in alerts, CVEs, dashboards, risk...
The 0.6% That Actually Matters
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Your security team is drowning in...