HiveForceLabs has recently made significant advancements in identifying cybersecuritythreats. Over the past week, threemajor attacks were detected, fourcritical vulnerabilities were actively exploited, and onethreat actor is closely monitored, reflecting an alarming escalation inmalicious activities.
SHubReaper, anew macOS infostealer chaining spoofed Apple, Google, and Microsoft branding,delivered via fake WeChat and Miro installers, executed through AppleScript tobypass macOS Tahoe paste protections, and persisted as a LaunchAgentto harvest browser credentials, Keychain data, and crypto wallets. CVE-2026-5426(KnowledgeDeliver),a zero-day ASP.NET ViewState deserialization flaw abused viahard-coded machineKeyvalues for unauthenticated RCE, deploying the BLUEBEAM (aka Godzilla) in-memoryweb shell and Cobalt Strike BEACON through tampered LMS JavaScript.
Meanwhile,bandcampro,asolo Russian-speaking actor weaponizing a jailbroken Google Gemini as anoperational co-worker to run a five-year MAGA-themed Telegram operation, crackWordPress credentials, and distribute the StellarMonstertrojanizedcrypto wallet that covertly deployed GoToResolvefor seed-phrase theft. CVE-2026-34926(Trend Micro Apex One), an actively exploited directory traversal flaw lettinga pre-authenticated admin modify a key table on the Apex One server and injectmalicious code auto-distributed to all connected agents, turning the EDR's ownupdate channel into a fleet-wide payload delivery mechanism. These risingthreats pose significant and immediate dangers to users worldwide.
.svg)