Red Hot Cyber. The Cybersecurity Blog
Ultime news
A single data center on fire, an entire country in digital blackout: the case of South Korea
A fire at a government data center in South Korea has reduced the country's digital infrastructure to rubble and starkly...
Redazione RHC - 7 October 2025
The Rise of Digital Partners: AI Becomes Wiresexuals’ Safe, Convenient, and Controllable Haven
Disillusionment with online dating is increasingly pushing women to seek emotional intimacy in the virtual world. More and more women...
Redazione RHC - 7 October 2025
Amazon founder Jeff Bezos: AI hype is a bubble!
During the Italian Tech Week in Turin, Jeff Bezos, founder of Amazon and one of the richest men in the...
Redazione RHC - 7 October 2025
Why does the United States buy rare earths from China despite its own reserves?
In recent years, the topic of rare earths has returned to the forefront of international debate, especially given China's dominant...
Redazione RHC - 7 October 2025
RediShell: A 13-year-old score 10 RCE has been upgraded to Redis
A 13-year-old critical flaw, known as RediShell , in Redis allows remote code execution (RCE) , giving attackers the ability...
Redazione RHC - 7 October 2025
An 8-year-old critical bug in the Unity game engine poses risks to Android and Windows.
A vulnerability has been discovered in the Unity game engine, which has been present since 2017. The issue can be...
Redazione RHC - 7 October 2025
FIDO Downgrade Attacks, a New Authentication Threat
Proofpoint researchers have identified a sophisticated downgrade attack that could bypass FIDO-based authentication, exposing targets to adversary-in-the-middle (AiTM) threats.These are some of the key findings the researchers found: Using a...
Mozilla Fixes Dangerous RCE Bug in Firefox 142
Mozilla has fixed several high-severity security bugs with the release of Firefox 142, preventing attackers from remotely executing code of their choosing on affected systems. The security advisory, published on...
Spyware under fire! Apple releases a critical patch for a 0day used on iOS and iPadOS
Apple has released an urgent security patch for iOS and iPadOS to address a critical zero-day vulnerability. This vulnerability, identified as CVE-2025-43300, has been confirmed to be actively exploited in...
LastPass, 1Password, and Keeper under fire! Widespread zero-day bugs detected, putting millions of users at risk.
A cybersecurity expert has identified zero-day vulnerabilities affecting eleven popular password managers, potentially putting tens of millions of users at risk of credential theft with a single malicious click. An...
Zero-Day RCE Exploit for Windows Selling for $125,000: How to Protect Yourself
Browsing the dark web can reveal disturbing and alarming ads for those involved in cybersecurity. Recently, we noticed a post offering a zero-day exploit, an extremely dangerous type of tool,...
Nike Under Fire! IT Infrastructure Access for Sale from an Initial Access Broker
An Initial Access Broker is selling access to Nike USA servers on a popular underground forum. A recent post on a dark web forum has raised new concerns about the...
A critical bug in Ollama allows for model replacement attacks
A vulnerability in the popular AI model launcher Ollama opened the door to drive-by attacks, allowing attackers to silently interfere with the local application via a specially crafted website, read...
When Criminal Hackers Patch Linux Servers for You! And That’s Not a Good Thing
Red Canary specialists have discovered an unusual campaign using the new DripDropper malware, targeting Linux cloud servers. The attackers gained access via the CVE-2023-46604 vulnerability in Apache ActiveMQ, then gained...
AI Wants Nuclear Power! Google, Kairos Power, and TVA Team Up for Sustainable Energy
Google, Kairos Power, and the Tennessee Valley Authority (TVA) have entered into an agreement to supply nuclear power to data centers in the United States. The agreement is part of...
McDonald’s hacked by BobDaHacker! Better him than real cybercriminals
Researcher BobDaHacker discovered that McDonald's app rewards point validation was only handled client-side, allowing users to claim free items like nuggets even without enough points. BobDaHacker reported the issue, but...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
