1589 matches found
The Psychology of Exposure: Why Security Teams Ignore What’s Right in Front of Them
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Your security team sees everything and notices nothing. Drowning in alerts, CVEs, dashboards, risk...
The 0.6% That Actually Matters
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Your security team is drowning in...
The 48-Hour Exploit Window: Are You Ready?
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Forget everything you know about...
Draw the Line: Smart Consolidation or Bloated Platformization?
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on Smart Consolidation vs Platformization. I often wonder…have CIS...
From Searching in the Dark to Seeing Ahead With Hive Pro’s Enhanced BAS
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on Hive Pro's Enhanced BAS! During a recent incident response, I...
Critical OpenStack Vulnerability Exposes Cloud Data
...
SneakyChef Group Hits Governments Using SugarGh0st and SpiceRAT
...
PHP RCE Flaw Opens a Gateway for TellYouThePass Ransomware
...
Attacker Employs Multi-Stage Malware Strategy to Target Ukraine
...
APT28’s Tactical Exploitation of Critical Vulnerabilities
Summary: The APT28 adversary, originating from Russia, has garnered notoriety through sophisticated phishing activities. By exploiting patched vulnerabilities as an initial access point, APT28 conducts extensive campaigns targeting diverse sectors, including government, aerospace, education,...
CISA Known Exploited Vulnerability Catalog November 2023
For a detailed CISAs KEV Catalog, download the pdf file here Summary The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. It is recommended that all organizations review and monitor the KEV catalog,...
DJVU Ransomware’s Variant Emerges Disguised as Cracked Software
Summary: A variant of the DJVU ransomware, disguising itself as cracked software, has emerged and is demanding a ransom of $980 for decryption. These incidents involve the infiltration of systems by various commodity loaders and infostealers, with the adversarys primary objectives being data...
Decoding Bronze Starlight’s Strategy in the Gambling Sector
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A cyberattack campaign stemming from China is currently focusing its efforts on the Southeast Asian gambling industry, with the objective of deploying Cobalt Strike beacons on compromised systems. To...
MichaelKors Ransomware Targets Linux and VMware ESXi Systems with Hypervisor Jackpotting
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary MichaelKors ransomware, a new RaaS operation, has been targeting Linux and VMware ESXi systems since April 2023, utilizing the tactic of "hypervisor jackpotting" to gain unrestricted access and encrypt...
Summary of Vulnerabilities & Threats: April 2023
...
Chrome 111 addresses an array of security flaws
Threat Level Vulnerability Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary Chrome has addressed several security vulnerabilities that encompass unauthorized access, Use after Free, Type Confusion, and Heap buffer overflow...
Injection vulnerability in VMware Carbon Black App Control
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary There is an injection vulnerability in VMware, specifically in the Carbon Black App Control product. If a malicious actor, who has privileged access to the App Control administration console,...
Gartner: “Organizations Must Expand From Threat to Exposure Management in 2023”
...
Actors, Threats and Vulnerabilities 26 December 2022 – 02 January 2023
...
Truebot exploits vulnerability in Netwrix to deploy Clop Ransomware
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary In 2017, Truebot was discovered to be linked to the Silence group and has affected more than 1,500 systems worldwide with shellcode, Cobalt Strike beacons, Grace malware, the Teleport tool, and Clop...
US Defense & NGOs fall prey to Russian hackers
Threat Level Actors Report For a detailed threat advisory, download the pdf file here Summary Russian state-sponsored group Calisto is linked to spoofing Microsoft login pages of Global Ordnance, a legitimate U.S. military weapons and hardware supplier. According to some, the themed domains are...
Vulnerabilities & Threats that Matter 07 – 13 November 2022
...
Eternity Threat group is actively evolving its malware arsenal
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Eternity threat group also known as Eternity Team or Eternity Project, a Russian "Jester Group"-affiliated threat group, has been active since at least January 2022. Eternity uses a...
DarkTortilla crypter is set to become a formidable threat
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary DarkTortilla is a sophisticated and highly configurable .NET-based crypter that has been active since at least August 2015. The malware is popular for the deployment of remote access trojans RATs, target...
HavanaCrypt ransomware spreads through fake google updates
Threat Level Attack Report For a detailed advisory, download the pdf file here Summary HavanaCrypt is a new ransomware that distinguishes itself as a Google software update. It evades detection using a Microsoft web hosting service IP address as the command and control C&C server...
Supply Chain Cybersecurity Risk Management Guide
Your organization's security is only as strong as its weakest vendor. A single compromised supplier, an unpatched software dependency, or a breached managed service provider can give attackers a direct path into your environment, bypassing every control you have built internally. The SolarWinds...
How to Prioritize Vulnerabilities Effectively: A Framework
Attackers don’t care about your massive backlog of "critical" vulnerabilities. They look for the path of least resistance—the one exploitable weakness that gives them a foothold into your network. If your vulnerability management program isn't thinking like an attacker, you're always one step...
What is CTEM? A Modern Approach to Cyber Risk
To effectively defend your organization, you need to think like an attacker. Attackers don’t care about a vulnerability’s CVSS score; they care about whether they can exploit it to reach a valuable target. Traditional security often misses this crucial context, leaving you to guess which of the...
The 5 Stages of a CTEM Cybersecurity Program
To beat an attacker, you have to think like one. An adversary doesn't care about your compliance reports or internal severity ratings. They care about one thing: finding an exploitable path to your critical assets. So why are we still prioritizing based on theoretical scores? A modern security...
How Hive Pro Brings Comprehensive Security to CrowdStrike and SentinelOne
& How HivePro Vulnerability Exposure Management VEM extends and amplifies the value of your existing endpoint security/EDR investments - turning detection strength into enterprise-wide vulnerability and exposure intelligence. The Challenge Your EDR is world-class. Your exposure visibility isn't...
How HiveForce Labs Finds Threats Before They Hit
There’s often a huge gap between knowing about a threat and knowing if you’re protected from it. A threat feed might tell you about a new attack campaign, but that information lives in a report. It doesn't tell you what would happen if that same attack hit your network. This is the difference...
5 Best Qualys Replacement Solutions Reviewed
Knowing you have vulnerabilities is one thing; knowing if your defenses can actually stop an attack is another. Traditional vulnerability scanners tell you where the holes are, but they don't tell you if your security controls are configured correctly or if they'll perform under pressure. This is...
What Is Hive Pro’s End-to-End CTEM Solution?
The difference between a good security program and a great one often comes down to context. Without it, a list of 10,000 vulnerabilities is just a list. But when you can see that three of those vulnerabilities are being actively exploited by a threat group targeting your industry, your priorities...
The Ultimate CISO Dashboard: A Complete Guide
Traditional vulnerability management can feel like a never-ending game of whack-a-mole. You patch one critical issue, and three more pop up, leaving your team feeling burnt out and perpetually behind. A modern dashboard changes the game entirely. By integrating real-world threat intelligence, it...
How to Modernize Your Vulnerability Management Program A Helpful Resource Guide For CISOS and Vuln teams
Running a vulnerability scan can feel like opening Pandora's box. You’re suddenly faced with a report listing thousands of potential weaknesses, and the pressure to "fix everything" is immense. But this approach is a recipe for burnout, leaving your team chasing low-impact issues while a real...
What Is Security Control Validation? A Practical Guide
A fully-stocked security arsenal can create a dangerous false sense of security. You might have the best technology on the market, but misconfigurations, policy gaps, or a lack of integration can leave you just as exposed as having no tools at all. Relying on a defense that only looks good on pap...
The 5-Step Exposure Remediation Automation Process
Security teams are often buried under a mountain of vulnerability alerts. The daily reality is a constant scramble to patch the most critical issues, leaving a massive backlog of lower-priority—but still dangerous—exposures. This reactive cycle is exhausting and unsustainable. It’s like trying to...
The CVE Deluge of 2025: Why It’s More Than Just a Number Problem
If you’re on the go and don’t have time to sit down with the full blog, we’ve put together an in depth audio breakdown so you can catch the key insights anytime, anywhere. The year 2025 marks a turning point in cybersecurity. It's the year the floodgates opened in the world of cyber. For years, t...
The 0.6% That Actually Matters
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Your security team is drowning in...
Control Validation: The Missing Link in Security Assurance
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! You've got the prettiest security...
No CWE? No Excuse. Why Classification Gaps Are a Hacker’s Dream
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! In cybersecurity, we obsess over...
The Pressure Is Building: Why CAASM Is Becoming a Strategic and Regulatory Imperative
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Some things in cybersecurity becom...
The Rise of Intelligent Security Validation: What a Month of Enhanced BAS Revealed
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Four weeks ago, a major healthcare...
Mekotio Trojan Targets the Latin American Financial Sector
...
Microsoft MSHTML Flaw the Silent Doorway for MerkSpy Malware
...
regreSSHion: Exploiting Signal Handler Race Condition in OpenSSH
...
Attacks, Vulnerabilities and Actors 24 to 30 June 2024
For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made significant advancements in identifying cybersecurity threats. Over the past week alone, HiveForce Labs has detected eight executed attacks, reported thirteen vulnerabilities, and identified five...
ExCobalt’s GoRed the Silent Infiltrator of Russian Sectors
...
Medusa Ransomware Unleashed A Growing Cybersecurity Menace
Summary: Medusa ransomware, a potent threat since late 2022, employs a multi-extortion approach via its Medusa Blog, disclosing victim data and pressuring non-compliant organizations. Operating as a ransomware-as-a-service, Medusas global impact underscores the need for proactive cybersecurity...
TA4557 Targets Recruiters by Delivering Malware Disguised as Job Applicant
Summary: Threat actor TA4557 has been focusing on recruiters by posing as job applicants to distribute malware. While this approach is not unprecedented, there have been notable shifts in both technique and attack vectors compared to their previous methods. The attackers have demonstrated an...