Red Hot Cyber. The Cybersecurity Blog
149 Million Accounts Exposed: The Database No One Should Have Seen
A recent leak revealed 149 million logins and passwords exposed online , including accounts for financial services, social media, gaming, and dating sites. The discovery was made by researcher Jeremia...
When Malware Hides in Videos! The PixelCode Technique Breaks the Rules
PixelCode began as a research project exploring a hidden technique for storing binary data within images or videos . Instead of leaving a plaintext executable, the file is converted into pixel data, t...
CISA alert: Exploit underway against VMware vCenter. Risk of RCE without authentication.
The critical vulnerability recently added to the Cybersecurity and Infrastructure Security Agency (CISA) catalog of known exploited vulnerabilities (KEVs) affects the Broadcom VMware vCenter Server an...
“I Stole 120,000 Bitcoins”: The Confession of the Bitfinex Hacker Who Now Wants to Defend Cyberspace
The story ofIlya Lichtenstein, the hacker responsible for one of the largest cyber attacks ever carried out against cryptocurrencies, reads like an episode of a TV series, yet it is absolutely real. A...
NoName057(16) hits Italy 487 times in the last 3 months: the DDoS wave does not stop
Italy has confirmed itself as one of the main targets of the DDoS attack campaign carried out by the hacktivist group NoName057(16) . According to what was declared directly by the collective, our cou...
Nearly 2,000 bugs in 100 dating apps: How your data can be stolen
A study of 100 dating apps revealed a disturbing picture: nearly 2,000 vulnerabilities were detected, 17% of which were classified as critical. The analysis was conducted by AppSec Solutions. The stud...
MacSync: The macOS malware that empties your wallet… after weeks
A new malware campaign has emerged in the macOS world, one that relies not on sophisticated exploits, but on good old-fashioned social engineering. It’s powered by the MacSync malware, distributed usi...
PurpleBravo’s Contagious Interview: Malware Campaign Targets Global Firms
For over a year, the North Korean group PurpleBravo has been running a targeted malware campaign called “Contagious Interview,” using fake job interviews to attack companies in Europe, Asia, the Middl...
KONNI Malware Targets Crypto Developers with AI-Powered Attacks
Check Point Research recently discovered a sophisticated phishing campaign orchestrated by KONNI , a threat group linked to North Korea . Historically focused on diplomatic targets in South Korea, the...
Cisco Zero-Day Vulnerability CVE-2026-20045 Actively Exploited
A critical zero-day remote code execution (RCE) vulnerability, identified as CVE-2026-20045, has been discovered by Cisco and is being actively exploited in active attacks. Cisco has urged immediate p...
Ultime news
APT28 Phishing Campaign: Credential Harvesting Tactics
Iran Cyber Crisis: Connettività Compromised
ServiceNow AI Vulnerability CVE-2025-12420: Critical Security Risk
Microsoft Expands Global Network with New Undersea Fiber Optic Cables
Poisoning AI Data: The New Threat to Machine Learning Models
Pig Butchering Scams Evolve with PBaaS: The New Threat
Neuralink’s Brain-Computer Implants to Revolutionize Human Life by 2026
Redazione RHC - January 3rd, 2026
Zero-Day Exploits on the Rise: How to Protect Your Network
Redazione RHC - January 2nd, 2026
Long-Lived Technologies: COBOL, C, SQL, and Legacy Systems
Redazione RHC - January 2nd, 2026
PollyPolymer Revolutionizes Robotics with 3D Printed Flexible Components
Redazione RHC - January 2nd, 2026
GlassWorm Malware Targets macOS via Open VSX Extensions
Massimiliano Brolli - January 2nd, 2026
AI Job Losses: Geoffrey Hinton Warns of Widespread Unemployment by 2026
Redazione RHC - January 2nd, 2026
NVIDIA Tegra X2 Vulnerability: Millions of Devices at Risk
Redazione RHC - January 1st, 2026
China Regulates AI Chatbots with Human-like Interaction
Redazione RHC - January 1st, 2026
The Dark Side of AI Rights: Why Experts Are Urging Caution
Redazione RHC - January 1st, 2026
EU’s Child Sexual Abuse Regulation: Balancing Safety and Digital Rights
Paolo Galdieri - January 1st, 2026
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cyber NewsOnce again, Microsoft was forced to quickly fix some flaws. The company has released unscheduled patches for Microsoft Office, addressing a dangerous zero-day vulnerability that has already been exploited in cyberattacks. The issue, identified as…
Cyber NewsThe recent discovery of a vulnerability in ServiceNow’s AI platform has shaken the cybersecurity industry. This flaw, characterized by an extremely high severity score, allowed unauthenticated attackers to impersonate any corporate user. To launch the…
CybercrimeA recent leak revealed 149 million logins and passwords exposed online , including accounts for financial services, social media, gaming, and dating sites. The discovery was made by researcher Jeremiah Fowler and shared with ExpressVPN.…
CybercrimePixelCode began as a research project exploring a hidden technique for storing binary data within images or videos . Instead of leaving a plaintext executable, the file is converted into pixel data, transforming each byte…
Cyber NewsSecurity researchers have recently observed a worrying evolution in the offensive tactics attributed to North Korean-linked actors as part of the campaign known as Contagious Interview : no longer simple fake job interview scams, but…












