Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
Nezha Malware: Abusing Legitimate Tools for Remote Access
There comes a moment, often too late, when you realize the problem didn't come from forcing the door, but from...
Redazione RHC - 24 December 2025
Cybercrime
Massive Cloud Cyberespionage: PCPcat Hits 59,128 Servers in 48 Hours
A large-scale, highly automated cyberespionage campaign is systematically targeting the cloud infrastructure that supports numerous modern web applications. In less...
Redazione RHC - 24 December 2025
Cybercrime
Critical Net-SNMP Vulnerability Exposes Networks to RCE Attacks
A critical vulnerability has been discovered in the Net-SNMP software suite, widely used globally for network management and monitoring. The...
Redazione RHC - 24 December 2025
Cybercrime
A backdoor in NVIDIA code. Three 9.8 bugs plague AI and robotics development systems
When it comes to cybersecurity, you can never be too careful. Furthermore, when we talk about backdoors (or alleged ones),...
Redazione RHC - 24 December 2025
Cybercrime
Australia Boosts Papua New Guinea’s Digital Infra with New Undersea Cable
A new undersea cable funded by Australia under a recent mutual defence agreement with Papua New Guinea is set to...
Redazione RHC - 23 December 2025
Cybercrime
China Issues First Level 3 Autonomous Driving Licenses, Paving Way for Self-Driving Cars
On December 23, the Traffic Management Bureau of the Beijing Municipal Public Security Bureau officially issued the first batch of...
Redazione RHC - 23 December 2025
SonicWall SMA1000 Vulnerability: Critical Security Patch Released
Researchers have discovered a vulnerability, identified as CVE-2025-40602, affecting SonicWall's SMA1000 series of secure access gateways. This flaw is particularly concerning because it could allow an attacker to escalate their...
HPE OneView Vulnerability CVE-2025-37164: Critical Security Update Required
Cybersecurity is a serious issue, especially when it comes to vulnerabilities that can compromise an entire system. Well, Hewlett Packard Enterprise (HPE) has just raised the alarm about a truly...
CISA Warns of Critical Vulnerabilities in Cisco, SonicWall, and ASUS Devices
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert including three new vulnerabilities in its catalog of exploited cyber threats (KEVs), highlighting that these flaws are currently...
Critical Windows Admin Center Flaw CVE-2025-64669 Exposes Servers to Attack
A security flaw has been discovered in Microsoft's Windows Admin Center (WAC) . Essentially, a permissions error could allow any standard user to take control of a server. The Cymulate...
Ink Dragon Hackers Uncovered: Sophisticated Cyber Espionage Operation
It was only a matter of time. Governments around the world have now put their security systems on high alert. Indeed, a large-scale espionage operation conducted by a group of...
Google Discontinues Dark Web Report, Shifts to Active Protection
No more useless alerts. No more passive monitoring. Less than two years after its launch, Google has decided to shut down one of the most talked-about digital security tools: the...
CyberVolk Ransomware Flawed: Free File Recovery Possible
This isn't the first time criminal hackers make mistakes, and it won't be the last. The pro-Russian hacktivist group CyberVolk launched the RaaS service VolkLocker (also known as CyberVolk 2.x)....
OSINT Ethics and Legality: Navigating Open Source Intelligence
Open Source Intelligence (OSINT) has emerged in recent years as one of the most fascinating, yet most insidious, disciplines in the information and security landscape. Its essence is remarkably simple:...
The Psychology of Passwords: Why Weak Passwords Persist
The psychology of passwords starts right here: trying to understand people before systems. Welcome to "The Mind Behind Passwords," the column that looks at cybersecurity. From a different perspective: that...
Russian Cyber Operations Shift to Targeting Western Critical Infrastructure
New details emerge from an Amazon Threat Intelligence report that highlight an alarming shift in Russian government-backed cyber operations. High-level 0-day exploits, often attributed to state-sponsored actors, have seen a...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Culture
Cybercrime