Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
LockBit 5.0 Ransomware: New Threats and Advanced Tactics
The LockBit group, which many had quickly dismissed after high-profile failures and leaks, unexpectedly returned to the scene. In the...
Redazione RHC - 22 January 2026
Cybercrime
Fortinet FortiOS Vulnerability Exploited: CVE-2025-59718 Patch Bypass
Attackers are exploiting a previously patched critical FortiGate authentication flaw (CVE-2025-59718) through a patch bypass method to breach protected firewalls,...
Redazione RHC - 22 January 2026
Cybercrime
Cisco Zero-Day Vulnerability CVE-2026-20045 Actively Exploited
A critical zero-day remote code execution (RCE) vulnerability, identified as CVE-2026-20045, has been discovered by Cisco and is being actively...
Redazione RHC - 22 January 2026
Cybercrime
Cybersecurity in Local Administrations: The Hidden Risk
There's a convenient misconception in Italy: thinking that cybersecurity is a matter for ministries or large strategic players. It's reassuring....
Roberto Villani - 22 January 2026
Cybercrime
UK Organizations Hit by Russia-Backed DDoS Attacks
The UK's National Cyber Security Centre has issued a strong warning regarding a series of denial-of-service (DDoS) attacks targeting British...
Redazione RHC - 22 January 2026
Cybercrime
GitLab Security Update Fixes Critical Vulnerabilities CVE-2026-0723
An urgent security update has been released by GitLab for the Community (CE) and Enterprise (EE) editions to address several...
Redazione RHC - 21 January 2026
LockBit 5.0 Ransomware: New Threats and Advanced Tactics
The LockBit group, which many had quickly dismissed after high-profile failures and leaks, unexpectedly returned to the scene. In the fall of 2025, it unveiled a new version of its...
Fortinet FortiOS Vulnerability Exploited: CVE-2025-59718 Patch Bypass
Attackers are exploiting a previously patched critical FortiGate authentication flaw (CVE-2025-59718) through a patch bypass method to breach protected firewalls, as Fortinet customers are experiencing. Fortinet reportedly plans to soon...
Cisco Zero-Day Vulnerability CVE-2026-20045 Actively Exploited
A critical zero-day remote code execution (RCE) vulnerability, identified as CVE-2026-20045, has been discovered by Cisco and is being actively exploited in active attacks. Cisco has urged immediate patching, and...
Cybersecurity in Local Administrations: The Hidden Risk
There's a convenient misconception in Italy: thinking that cybersecurity is a matter for ministries or large strategic players. It's reassuring. And it's wrong. In the real design of public connectivity,...
UK Organizations Hit by Russia-Backed DDoS Attacks
The UK's National Cyber Security Centre has issued a strong warning regarding a series of denial-of-service (DDoS) attacks targeting British organizations. This phenomenon has not gone unnoticed by authorities, who...
GitLab Security Update Fixes Critical Vulnerabilities CVE-2026-0723
An urgent security update has been released by GitLab for the Community (CE) and Enterprise (EE) editions to address several high-severity vulnerabilities. These vulnerabilities expose installations to potential denial-of-service (DoS)...
Critical Telnetd Vulnerability in GNU InetUtils Allows Root Access
A critical security flaw has been discovered in the telnetd server component of GNU InetUtils, involving remote authentication bypass . A security researcher reported the vulnerability on January 19, 2026....
Red Hot Cyber and Hack The Box: together for the CTF at the RHC 2026 conference
In the Italian and European cybersecurity landscape, few collaborations manage to combine educational vision, technical realism, and community impact as effectively as the partnership announced between Red Hot Cyber and...
Everest Ransomware Attacks McDonald’s, 861GB Data Stolen
Yesterday, the Everest cybercriminal gang claimed responsibility for a cyberattack on McDonald's on their Data Leak Site (DLS) . From the gang's post, the cybercriminals claim to have 861GB of...
ESXi Zero-Day Exploit: How to Protect Your VMware Environment
A group of attackers is using a zero-day exploit toolkit to compromise VMware ESXi instances in an uncontrolled manner, taking advantage of multiple vulnerabilities to bypass virtual machine restrictions. The...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
innovation
Cybercrime
Cybercrime