Hive

Blog

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

Aoki: Infostealer Targets AI Coding Assistant Credentials

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Ransomware Landscape in H1 2025: Statistics and Key Issues

Nightmare-Eclipse Zero-Days Hit CrowdStrike, NVIDIA, Avast & More

ShieldCrash: Testing the Claimed Microsoft Defender Zero-Day

Warlock Ransomware Attackers Hit Water and Telecom Operators

Flash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

China and the Cyber Arms Race for AI Supremacy

FamousSparrow Takes Flight with New SparroWocky Backdoor

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

Hunting Feral Wolf: new tools and techniques

New Windows Defender ShieldCrash 0-Day Lets Attackers Read Arbitrary Files as SYSTEM

CVE-2026-81578: Exploited PaperCut Authentication Bypass Chains to Pre-Auth RCE

Microsoft’s August Security Update of High-Risk Vulnerability Notice for Multiple Products

Oracle SQL Injection Attack Escalates to SYSTEM-Level Windows Code Execution

Spirals Attackers Disable Windows Defender and Kill Backup Services Before Encrypting Systems

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

Inside Kimsuky’s CHM Tradecraft: Multi-Stage Execution and Selective Payload Delivery

Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations