1589 matches found
Deciphering Mirai’s Next Chapter: the Strategies of the Latest Players
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The realm of cybersecurity witnessed the rise of formidable botnet variants stemming from the notorious Mirai source code. Prominent among them are hailBot, kiraiBot, and catDDoS, showcasing heightened...
Atera Addressed Two Zero-Day Vulnerabilities Exploiting MSI Files
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Windows Installers for the Atera remote monitoring and management software contain two zero-day vulnerabilities that could serve as a starting point for launching privilege escalation attacks. To...
CustomerLoader Disseminating Diverse Malware Payloads
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A covert .NET loader, known as CustomerLoader, was specifically designed to facilitate the retrieval, deciphering, and activation of subsequent payloads. Throughout the early days of June 2023, various...
Mirai Botnet Exploits Multiple Flaws in the Latest Campaign
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new variant of the Mirai botnet is actively exploiting vulnerabilities in various devices, aiming to create botnets and launch DDoS attacks. To receive real-time threat advisories, please follow...
Summary of Vulnerabilities & Threats: May 2023
...
Immediate Threat Reduction for a Telecom Company
In this video, Anand Choudha, CEO at Hive Pro, and Jeelan Poola, CPO at Hive Pro, introduce the HivePro Uni5 Threat Exposure Management Platform. HivePro Uni...
Actors, Threats and Vulnerabilities 27 March to 2 April 2023
For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, they identified a total of Nine attacks that were executed...
Chrome 111 addresses an array of security flaws
Threat Level Vulnerability Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary Chrome has addressed several security vulnerabilities that encompass unauthorized access, Use after Free, Type Confusion, and Heap buffer overflow...
SYS01 Stealer Targets Government and Manufacturing Industry
Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary The SYS01 stealer has been targeting critical government infrastructure employees, manufacturing companies, and other industries, and using various delivery technique...
Summary of Vulnerabilities & Threats: February 2023
...
Summary of Vulnerabilities & Threats: January 2022
...
Actors, Threats and Vulnerabilities 9 January 2023 – 15 January 2023
...
BlackMagic Ransomware disrupts the Israeli logistics sector
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The latest ransomware entity, known as "BlackMagic" has emerged. This gang targets its victims using a double extortion approach in which it initially exfiltrates the victims data, followed by encryption...
Security updates for Adobe InCopy June 2022
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary Adobe has released security updates in Adobe InCopy that address critical vulnerabilities at priority 3 as per Adobe. These vulnerabilities could lead to arbitrary code execution...
Prolific threat actor TA551 using new malware IcedID
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here TA551 is a financially motivated threat group that has been active at least since 2018. The gang primarily targeted English, German, Italian, and Japanese speakers through email-based malware distribution activities. IcedID, a...
Monthly Threat Digest: February 2022
...
Cybersecurity Risk Assessment: The Complete Guide for Security Leaders
Most security teams treat risk assessments as a compliance checkbox, a periodic exercise that generates a thick report, collects dust for six months, and then gets repeated. The result? Organizations discover their biggest exposures only after an incident, not before. A cybersecurity risk...
What Is Threat Exposure Management? A Complete Guide
Most security teams can tell you how many vulnerabilities they found last quarter. Very few can tell you which of those vulnerabilities an attacker could actually exploit to breach a critical system. That gap between "found" and "actually dangerous" is the problem threat exposure management was...
Threat and Vulnerability Management: Building a Unified Program
Most security teams run threat intelligence and vulnerability management as separate operations. Threat analysts track adversary campaigns and emerging exploits. Vulnerability teams run scans, generate reports, and chase patches. The two groups rarely share a workflow, a priority list, or even a...
AI Is Not Your Security Stack
There's a debate I keep hearing in security circles: now that large language models like Claude are so capable, do we still need dedicated cybersecurity tools? I understand the appeal of the question. AI can summarize threat reports, help write detection logic, interpret vulnerability advisories,...
Attackers Don’t Need Signatures. Neither Should Your Defense.
How signatureless detection closes the most dangerous gap in enterprise vulnerability management — and why CISOs are rethinking their approach to exposure. Continuous Threat Exposure Management The Hidden Limitation Costing You Sleep Every CISO faces the same unanswered question after a board...
Surge in QR Code Phishing Attacks, Hits Chinese Citizens
...
STARK#MULE Targets South Korea with US Military-themed Baits
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The STARKMULE cyber attack campaign is ongoing, with a focus on targeting Korean-speaking individuals. It employs U.S. Military-themed document baits to deceive its targets, leading them into unwittingly...
Revealing Vulnerabilities’ True Dimensions: Illuminating Your Detection Surface with HivePro Uni5
...
Attacks, Vulnerabilities and Actors 3 July to 9 July 2023
For a detailed threat digest, download the pdf file here Summary HiveForceLabs recently made several significant discoveries related to cybersecurity threats. Over the past week, the fact that there were a total of eight attacks executed, a zero-day vulnerability in the WordPress Plugin, and thre...
RA Group’s Custom Ransomware Hits US & South Korea
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The emergence of the RA ransomware group highlights the utilization of the recently leaked Babuk ransomware source code as they employ it to develop their variant of the malware. To receive real-time...
The Complete Vulnerability Management Lifecycle: A 6-Stage Framework for Proactive Security
The National Vulnerability Database adds over 2,000 new CVEs every month. No security team can patch them all, and trying to do so is a fast track to burnout. The organizations that stay ahead of breaches aren't the ones that scan the most. They're the ones that follow a structured, repeatable...
Event-Driven Vulnerability Exposure Management (VEM): Why you should move beyond Human Triggers
& The traditional approach to vulnerability management has long followed a familiar pattern: security teams log into their vulnerability management platforms, run scans, generate reports, analyze findings, and then prioritize remediation efforts. Rinse and repeat. While this on-demand model has...
What Is Exposure Management? A Modern Guide
Attackers don't just look for a single high-severity vulnerability; they look for a path of least resistance. They connect the dots between a misconfigured cloud service, an exposed credential, and an unpatched server to reach their goal. To build a strong defense, you need to see your environmen...
The 6-Step Threat and Vulnerability Management Process
Think of your security program as a house. You can have the best locks and alarm systems, but if the foundation is cracked, the whole structure is at risk. Threat and vulnerability management TVM is that foundation. It’s the continuous process of finding weaknesses in your systems, figuring out...
The Difference Between Vulnerability and Exposure Management Explained
To build a truly effective defense, you have to learn to see your organization through an attacker's eyes. Attackers don't care about your internal vulnerability scan reports or how many patches you applied last week. They look for one thing: an open door. They search for an accessible pathway th...
The Exposure Convergence: Why Identity, Infrastructure, and Intelligence Are Converging
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. The cybersecurity industry is experiencing a fundamental convergence around "exposure management" ...
You Can’t Secure What You Can’t See: The Real Pain CAASM Solves
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all! Let’s cut through the marketing haze for a moment. There’s a reas...
RansomHub A Rebranded Menace Exploiting the ZeroLogon Vulnerability
...
A Guide to Continuous Monitoring for Cyber Threats
A Guide to Continuous Monitoring for Cyber Threats Most security teams still rely on periodic vulnerability scans and annual penetration tests to assess their risk. The problem? Attackers do not work on your schedule. Between those snapshots, new vulnerabilities emerge, configurations drift, and...
Why Replace Kenna with Hive Pro? A Full Comparison
If your security team is drowning in alerts and spending more time triaging than remediating, you know the old approach to vulnerability management is broken. Chasing endless CVEs and trying to stitch together data from a dozen different tools leads to burnout and leaves critical gaps in your...
The 5 Stages of Cyber Threat Exposure Management
Think of your security posture like a fortress. Traditional vulnerability management gives you a long list of every potential weakness—a loose stone here, a weak gate there. A cyber threat exposure management CTEM program acts as your chief strategist, analyzing intelligence to show you exactly...
The New Frontline: Why DevOps Became a Cyber Target
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Your developers didn't become...
A Flaw in Microsoft Visual Studio Installer Enables Malicious Extension Distribution
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A vulnerability in Microsoft Visual Studio Installer allows attackers to gain unauthorized access, compromise systems, and distribute malicious extensions, posing a significant security risk. To...