Red Hot Cyber

Cybersecurity is about sharing. Recognize the risk, combat it, share your experiences, and encourage others to do better than you.
Search

Red Hot Cyber. The Cybersecurity Blog

Previous Next

Featured Articles

Let the hunt begin! Hackers exploit Citrix flaw to infiltrate global systems
Di Redazione RHC - 30/08/2025

A critical zero-day flaw, classified as CVE-2025-6543, has been discovered in Citrix NetScaler systems. This vulnerability has been actively exploited by malicious hackers since May 2025, several mont...

Phishing on Teams: at least the hacker responds faster than the real help desk!
Di Redazione RHC - 29/08/2025

In recent months, as previously reported on Red Hot Cyber, a new front has emerged in the corporate phishing landscape: Microsoft Teams attacks in which attackers impersonate IT or help desk personnel...

Critical vulnerabilities in NetScaler ADC and Gateway. Update now! Attacks are ongoing!
Di Redazione RHC - 28/08/2025

NetScaler has alerted administrators of three new vulnerabilities in NetScaler ADC and NetScaler Gateway, one of which is already being used in active attacks. Updates are available and the vendor urg...

Storm-0501: When Ransomware Moves to the Cloud
Di Luca Galuppi - 28/08/2025

Microsoft is raising the alarm: the Storm-0501 cybercriminal group has evolved. No more “traditional” attacks on on-premise machines, no more ransomware that encrypts local files. Now the threat i...

Microsoft Teams crashes: Embedded Office documents blocked from opening
Di Luca Galuppi - 28/08/2025

A Black Thursday for millions of Microsoft Teams users around the world. A key feature of the collaboration platform – opening embedded Office documents – has suddenly been knocked out, sparking f...

When a VPN Becomes a Spy! FreeVPN.One Takes Unauthorized Screenshots

Koi Security experts warn that the behavior of the popular Chrome extension FreeVPN.One has recently changed. It has begun secretly capturing screenshots of users’ activity and transmitting them to a remote server. “The FreeVPN.One case illustrates how a privacy-protecting product

RapperBot DDoS botnet dismantled and alleged developer arrested

The U.S. Department of Justice has indicted the alleged developer and administrator of the RapperBot DDoS botnet, which was leased to cybercriminals. The botnet itself was seized by law enforcement in early August as part of Operation PowerOff. RapperBot (also

PromptLock Arrives. The First Artificial Intelligence-Powered Ransomware for Windows and Linux

- August 27th, 2025

Finally (metaphorically speaking), we're here. ESET experts have reported the first ransomware program in which artificial intelligence plays a key role. The new sample has been named PromptLock. It is...

  

UNC6395 campaign aims to exfiltrate Salesforce data via compromised OAuth tokens

- August 27th, 2025

A sophisticated data exfiltration campaign targeting companies' Salesforce instances was conducted, resulting in the exposure of sensitive information from several organizations. This occurred through compromised OAuth tokens associated with the...

  

Supercomputer: Fugaku NEXT will be Japan’s first zetta-class supercomputer

- August 27th, 2025

RIKEN, Fujitsu, and Nvidia are collaborating on the development of FugakuNEXT, Japan's new flagship supercomputer, scheduled to become operational at the RIKEN campus in Kobe around 2030. With an estimated...

  

Intel Website Vulnerabilities: 270,000 Employees at Risk

- August 26th, 2025

An attack on Intel's internal resources has demonstrated that vulnerabilities can be found not only in processors, but also in company websites. A security researcher discovered four different ways to...

  

Sign up for the newsletter