Threat Advisories:

Crypto24 Ransomware Disrupts Businesses Using Custom EDR Bypass GodRAT Reloaded: Legacy Code, Modern Tactics Noodlophile Stealer Advances with Obfuscation, Social Media Deception PS1Bot: The Modular Malware Lurking Behind Malvertising Microsoft’s August 2025 Patch Tuesday Roundup Charon Ransomware Encrypts Files Belonging to Middle East Industries CVE-2025-25256: Fortinet Rushes to Patch High-Risk FortiSIEM Vulnerability Efimer Trojan: From Fake Lawsuits to Crypto Heists Zero-Day in WinRAR Actively Weaponized by Multiple Threat Groups DarkCloud Uses Fileless Techniques Turning into a Nightmare for Windows CastleBot Rising: The Evolving Malware-as-a-Service Threat MedusaLocker Uses ThrottleStop.sys Flaw to Kill AV on Windows Malicious npm Packages Target WhatsApp Developers with Kill Switch Trend Micro Warns of Active Exploits in Apex One Console SafePay Ransomware’s Rapid Ascent to the Top of the Cybercrime Scene Adobe Patches Three Critical Flaws in AEM Forms on JEE Plague in the Shadows: Unmasking a Silent Linux Backdoor RoKRAT Resurfaces: APT37’s Fileless Shortcut to Espionage Secret Blizzard Strikes Moscow with ApolloShadow Alone Theme Vulnerability Puts WordPress Sites at Risk

Podcast: This Month's Threats in 10 Min! Emerging Threat Intel Audio Briefing - Listen & Defend Now →

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

Zero-Click Outlook RCE Exploitation Chain in Windows

Threat Level – Red | Vulnerability Report

Two vulnerabilities (CVE-2023-35384 and CVE-2023-36710) in Microsoft Windows can be chained to achieve remote code execution (RCE) on vulnerable Outlook clients. Attackers can exploit these flaws by sending a crafted email with a custom notification sound file to trigger the download of a malicious audio file from a remote server.

Threat Level – Red | Vulnerability Report

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox