nation-state cyber threats.
Gated threat reports and active advisories from HiveForce Labs. Tracking the state-sponsored operations targeting your industry, your geography, and your infrastructure.
Featured Report · Part 2 · Most Downloaded
HiveForce Labs releases critical findings on the most significant cyber-kinetic conflict in history. Tactics, techniques, and procedures observed across Iranian state-sponsored operations targeting Western infrastructure.
Download the Report →
🔒 Gated · Form Required
Why This Matters
They're
targeting you now.
Geopolitical conflict has moved into the network layer. Iranian, Russian, Chinese, and North Korean operations are actively probing Western enterprises, with TTPs that bypass traditional vulnerability management. This hub is where HiveForce Labs publishes what we're seeing in the field.
01
Gated, in-depth threat reports for each nation-state actor we actively track.
02
Open threat advisories on specific CVEs, exploits, and campaigns tied to state-sponsored groups.
03
Briefing-list signup for nation-state coverage we're actively researching.
Iran · ACTIVE COVERAGE
.svg)
IR
ACTIVE COVERAGE
Iranian state-sponsored groups have escalated operations against Western infrastructure following the regional conflict. HiveForce Labs is actively tracking multiple campaigns targeting energy, financial services, government, and critical infrastructure.
Report · Part 2
Updated TTPs, infrastructure mapping, and remediation guidance based on Q1-Q2 2026 incident telemetry.
Download Report →
Report · Part 1
The original HiveForce Labs report on Iranian operations: threat actor profiles, observed TTPs, and target industries.
Download Report →
eBook · Companion Guide
Self-assessment guide for security leaders. Map the Iranian TTPs against your current controls and exposure posture.
Read the eBook →
Free Tool
Get a tailored report on your organization's exposure to active Iranian campaigns. Runs against your scan data, returns in 48 hours.
Request Assessment →
Russia · COMING SOON
.svg)
RU
COMING SOON
HiveForce Labs is actively researching Russian state-sponsored cyber operations, including groups historically linked to GRU and SVR activity. Comprehensive threat report in development.
Get Notified
HiveForce Labs is actively tracking this threat. Join the briefing list to receive the report and ongoing advisories the moment they publish.
Join the Briefing List →
China · COMING SOON
.svg)
CN
COMING SOON
Coverage of Chinese state-sponsored operations targeting Western technology, manufacturing, and government sectors. HiveForce Labs is mapping TTPs across known and emerging groups.
Get Notified
HiveForce Labs is actively tracking this threat. Join the briefing list to receive the report and ongoing advisories the moment they publish.
Join the Briefing List →
North Korea · COMING SOON
.svg)
KP
COMING SOON
Coverage of DPRK state-sponsored operations including financially-motivated campaigns targeting cryptocurrency, financial services, and defense sectors. Report in development.
Get Notified
HiveForce Labs is actively tracking this threat. Join the briefing list to receive the report and ongoing advisories the moment they publish.
Join the Briefing List →
Other Actors · COMING SOON
.svg)
?
COMING SOON
Coverage of unattributed state-sponsored activity and criminal groups with suspected state affiliations. Includes ransomware operators with state-tolerated operations and hybrid criminal/state actors.
Get Notified
HiveForce Labs is actively tracking this threat. Join the briefing list to receive the report and ongoing advisories the moment they publish.
Join the Briefing List →
Talk to Hive Pro
Book a Briefing →
Looking for general threat research and resources?
Visit the Learning Center →
