News
Discover
NewsletterLatest news
Cybercrime
AKIRA emergency report: the ransomware that is breaching Italy
Spring 2025 will be remembered as a turning point in our country's cyber chronicle. As bulletins and technical releases follow...
RHC Dark Lab - June 22, 2025
Cyber News
Group-IB contributes to INTERPOL’s Operation Secure, leading to the arrest of 32 suspects linked to information stealer malware in Asia
[Singapore; 11 June, 2025] Group-IB, a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime, announced today...
Sandro Sana - June 11, 2025
Cybercrime
RHC Interviews NOVA Ransomware – “Expect Dangerous Attacks. No One Is Safe.” | BLACKVIEW Series
On May 10, 2025, the City of Pisa suffered a ransomware attack within their computer systems. The next day Nova...
RHC Dark Lab - June 2, 2025
innovation
Bringing Your Imagination to Life: AI-Generated Images from Your Description
Remember when you had a vivid image in your mind but struggled to describe it to someone else? Maybe it...
Ashleigh Crause - May 14, 2025
Culture
Why Europe’s healthcare sector must build resilience to fight the threat of ransomware
Author: Andrea Nicelli, Head of Italy and Spain at Resilience Italy’s critical infrastructure is highly exposed to cyber threats, ranking...
Olivia Terragni - April 13, 2025
Cybercrime
The Evil Purr – DarkLab Interview to HellCat Ransomware!
HellCat ransomware appeared in the second half of 2024 with and it has attracted the attentions of analysts thanks to...
RHC Dark Lab - March 30, 2025
Cybercrime
VanHelsing RaaS: An Expanding Ransomware-as-a-Service Model
The ransomware threat landscape is constantly evolving, with increasingly structured groups adopting sophisticated strategies to maximize profits. VanHelsing is a...
Pietro Melillo - March 22, 2025
innovation
NIST selects second PQC Key Encapsulation algorithm
The fourth round of the American National Institute of Standards and Technology (NIST) Post Quantum Cryptography (PQC) competition has selected...
Tara Lie - March 18, 2025
Cyberpolitics
Paragon Spyware – Let’s talk about privacy and governments
Politics, information technology, and privacy. A triad continually seeking balance with a history of conflict that originates from the introduction...
Alessio Stefan - March 18, 2025
Cyberpolitics
Beyond the Dark Storm’s attack on X: how hacktivism’s Illusion reinforces the System
The Dark Storm attack on X (formerly Twitter) has been significant for several reasons. The attack on March 10 2025...
Olivia Terragni - March 18, 2025
Cybercrime
Babuk Locker 2.0: The New Ransomware Affiliate Program
Babuk, one of the most notorious ransomware groups in cybercrime, has launched the Babuk Locker 2.0 Affiliate Program 2025, an...
Pietro Melillo - March 13, 2025
Cybercrime
NightSpire: A New Player in the Ransomware Landscape
During our reconnaissance into the underground world and criminal groups conducted by Red Hot Cyber's threat intelligence laboratory DarkLab, we...
Pietro Melillo - March 12, 2025
Citrix: New Critical Vulnerability from 9.2 Affects NetScaler – Attacks Underway!
Citrix has reported a new critical vulnerability in its NetScaler appliances, already actively exploited by attackers. The problem is identified with the identifier CVE-2025-6543 and affects the popular NetScaler ADC...
REvil: Sentenced but then set free. The most controversial court case ever
Do you remember the infamous REvil cyber gang? The Russian hacker group responsible for some of the most devastating ransomware attacks in the early days of this global threat, known...
Shock in France: the gentlemen of BreachForums were twenty-year-old French citizens!
Shocking news in France: one of the largest global cybercrime networks dismantled. The BreachForum hackers were… French. French authorities have busted a large cybercrime operation, arresting five young French hackers...
Zero-Click Attack on Notepad++. HackerHood Tested the Exploit and It Really Works with Little
A dangerous vulnerability has been discovered in the latest version of the popular text editor Notepad++ that allows an attacker togain complete control over the system. The vulnerability has been...
22,000 Sites At Risk: New Motors WordPress Vulnerability Allows Total Hacking
Attackers are actively exploiting a critical privilege escalation vulnerability in the WordPress Motors theme, allowing them to hijack administrator accounts and take complete control of the target site. The malicious activity was...
Qilin & Associates Law Firm: Ransomware Hires Lawyers, Launches “Intimidation Package”
The developers of the Qilin ransomware (recently interviewed by us) offered their partners the help and advice of a team of lawyers, so that they could put pressure on the...
US-Iran Cyberwar: DHS Raises Alarm, American Networks Under Attack
The United States has warned of possible cyber attacks by pro-Iranian groups following a series of airstrikes against Iranian nuclear facilities, as part of the armed conflict between Iran and...
“Jailbreak as a Service” is Coming: 60 Euros a Month to Purchase Cybercrime-Ready AI Systems
According to a report by Cato Networks, cybercriminals continue to actively use LLM patterns in their attacks. Specifically, we are talking about versions of theGrok and Mixtral patterns that have been deliberately modified to bypass...
$200 for Access to an Italian Company! While the Dark Web is doing business, are you ready to defend yourself?
Following the case of the 568 endpoints of an Italian industrial machinery company, another compromised access related to an Italian software engineering company has ended up for sale on an underground forum...
“Cleaning Up” Windows Update! Microsoft Declares War on Drivers Exploited in Ransomware Attacks
Microsoft announced that it will periodically remove outdated drivers from the Windows Update Catalog to reduce risk and improve compatibility. "The goal of this initiative is to provide the best set of...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE