Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
ShadowLeak Arrives: A 0-Click Bug in ChatGPT Leads to Sensitive Data Exfiltration
A new threat is beginning to emerge in the IT world: the world of artificial intelligence agents. ShadowLeak is a...
Redazione RHC - 19 September 2025
Cybercrime
Generative Artificial Intelligence: Explosive Growth and Security Challenges
By Umberto Pirovano, Senior Manager Technical Solutions at Palo Alto Networks Generative Artificial Intelligence (GenAI) is redefining the technology and...
Redazione RHC - 19 September 2025
Cybercrime
GitLab fixes critical vulnerability CVE-2025-6454
The collaborative development platform GitLab has announced the fix for a critical vulnerability, identified as CVE-2025-6454. The issue affected server...
Redazione RHC - 18 September 2025
Cybercrime
Supply Chain Wormable? NPM Packages with Self-Propagating Malware Arrive
Security researchers have discovered the compromise of over 180 npm packages, infected with a self-propagating malware designed to infect other...
Redazione RHC - 18 September 2025
Cybercrime
The KING of RaidForums remains in limbo. The battle between the US and Portugal over his extradition continues.
The High Court in London has overturned the decision to extradite Portuguese citizen Diogo Santos Coelho to the United States....
Redazione RHC - 18 September 2025
Cybercrime
Italy under DDoS attack by pro-Russian NoName057(16)? Few disruptions.
The hackers of NoName057(16) have recently resumed their hostile activities against several Italian targets, using Distributed Denial-of-Service (DDoS) attacks. Based...
Redazione RHC - 18 September 2025
What is phishing? Let’s avoid falling for the hack-fisherman’s bait.
With the increase in ransomware attacks—often launched via phishing emails—it's crucial to be proactive in protecting yourself and the organization you work for. Certainly, having computers and servers that are...
What are supply chain attacks? A more concrete threat than ever.
As businesses become increasingly dependent on technology, connectivity, and third parties in general, supply chain attacks are becoming increasingly common. These attacks are aimed at compromising companies through their suppliers...
I use macOS because it’s secure! Atomic Stealer: €1,000 per month with backdoor features
Researchers have discovered a new version of the Atomic Stealer malware for macOS (also known as AMOS). The malware now has a backdoor that allows access to hacked systems. MacPaw...
Commodore 64: The return of the best-selling retro computer of all time is now
The record for best-selling desktop computer of all time is still held by the Commodore 64, as certified by the Guinness Book of Records, despite its discontinuation in 1994. However,...
The History of the Linux Kernel (2 of 2). Early Hackers Up to Version 1.0.
Article by Pietro Cornelio and Massimiliano Brolli Previous articles: The history of the Linux Kernel (1 of 2). From Torvalds to the hacker community In the first article we met...
The History of the Linux Kernel (1 of 2). From Torvalds to the Hacker Community
Article by Pietro Cornelio and Massimiliano Brolli The history of the Linux Kernel is a story of pure hacking as well as being a miracle of "collaboration". It is the...
Cult of the Dead Cow (cDc). The story of the most famous hacker group.
Hacker culture, as we've already discussed, is a fascinating subject that has evolved significantly over time to reach the present day. We talked about its origins in a video dedicated...
Apple 2: the story of a great success.
On June 10, 1977, the Apple II went on sale, the historic microcomputer that kicked off the home computing revolution. We'd like to dedicate an article to its history. The...
Russian domestic hackers Cozy Bear (APT29). Analysis of the main attacks and their TTPs.
Author: Gianluca Tiepolo APT29 is a highly sophisticated Advanced Persistent Threat (APT) group that has been attributed to Russia's Foreign Intelligence Service (SVR). The group has been active since at...
Critical Vulnerability in FortiWeb: Score 9.6 and Unauthorized SQL Commands
A new vulnerability, tracked under CVE-2025-25257, was recently published affecting several versions of Fortinet FortiWeb. This vulnerability could allow unauthenticated attackers to execute unauthorized SQL commands via forged HTTP/S requests....
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Vulnerability