Red Hot Cyber. The Cybersecurity Blog
Ultime news
Balancing speed and security! This is the real challenge of Vibe Coding.
The cybersecurity industry is undergoing a transformation: artificial intelligence is becoming not just a tool for developers, but also a...
Redazione RHC - 30 September 2025
TOR Anonymizer v3.0: Advanced Digital Privacy Protection
In a digital landscape increasingly characterized by mass surveillance and indiscriminate data collection, the pursuit of online anonymity has become...
Andrea Mongelli - 30 September 2025
Three serious vulnerabilities discovered in VMware vCenter and NSX: apply patches immediately.
On September 29, 2025, Broadcom released security advisory VMSA-2025-0016 , addressing three vulnerabilities identified in VMware vCenter and VMware NSX...
Redazione RHC - 29 September 2025
0-day 0-click WhatsApp! All it takes is one image to take control of your iPhone.
Some spyware producer is probably doing gymnastics... tearing their hair out. But it's the usual charade: someone finds, someone cashes...
Redazione RHC - 29 September 2025
Computer science graduates with no future! Thousands of resumes ignored, and goodbye to six-figure salaries.
Alarming trends are emerging in the IT job market. More and more computer science graduates are unable to find work,...
Redazione RHC - 29 September 2025
The US wants to hack Telegram! The case sparks debate over privacy and jurisdiction.
The U.S. Department of Justice has received court authorization to conduct a remote inspection of Telegram's servers as part of...
Redazione RHC - 29 September 2025
ShadowSyndicate: The MaaS Infrastructure Behind Major Ransomware Attacks
The ShadowSyndicate infrastructure, also known as Infra Storm, has come under the spotlight of security researchers after they identified significant overlap with some of the largest ransomware programs. Active since...
With ToolShell, you can access the Internet information Services (IIS) Machine keys.
In an article published on August 5, 2025, on the ISC SANS blog by Bojan Zdrnja, it is possible to steal "machine keys" from IIS servers. The author explores the...
Would you like to have a robot that does the laundry? Figure’s robot does it.
As for the mundane tasks humanoid robots could soon perform for us, the possibilities are vast. Doing laundry is probably at the top of many people's wish list. Figure 02...
SonicWall in the crosshairs: possible 0-day vulnerability, users at risk
Last Sunday, Red Hot Cyber published an in-depth analysis of the increased malicious activity of the AKIRA ransomware, which appears to exploit an undocumented 0-day vulnerability in SonicWall devices with...
Cisco Hit by a Vishing Attack! Registered Users’ Profile Data Exfiltrated
Cisco, a leading global network infrastructure and cybersecurity company, recently announced the impact of a security incident. Founded in 1984 and headquartered in San Jose, California, Cisco is known for...
The Monte Carlo Casino is on D4rk4rmy’s website! The ransomware group claims responsibility for the cyber attack.
The criminal organization known as D4rk4rmy has claimed responsibility for the cyber attack against the Monte-Carlo Société des Bains de Mer (SBM) on its Data Leak Site (DLS). The site...
Ransomware Exploits SharePoint! 4L4MD4R Discovered, the Hybrid Attack That’s Even Scare Governments
A massive campaign to exploit a series of vulnerabilities in Microsoft SharePoint continues to gather pace, now involving ransomware groups. While analyzing the series of attacks, Palo Alto Networks (Unit...
Critical Bugs on NVIDIA Triton Allow Attackers to Compromise and Steal AI Model
Critical vulnerabilities have been discovered in NVIDIA's Triton Inference Server, threatening the security of AI infrastructure on Windows and Linux. The open-source solution is designed for large-scale deployment and maintenance...
Everyone’s talking about GPT-5. No one’s seen it. But the memes are already everywhere.
GPT-5 hasn't even appeared yet, and internet users have started creating all kinds of memes to complain. Indeed, the rumors about GPT-5 haven't stopped in recent days. First, some internet...
PoisonSeed: How Phishing Attacks Bypass FIDO with WebAuthn
The authors of the PoisonSeedphishing campaign have found a way to bypass FIDO (in this case, FIDO2 with WebAuthn) using the cross-device authentication mechanism implemented in WebAuthn. The attackers convince...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
