Red Hot Cyber. The Cybersecurity Blog
Featured Articles

The Tor project has announced the introduction of a new encryption scheme, called Counter Galois Onion (CGO) , intended to replace the previous Tor1 Relay method. The update aims to strengthen network...

A group of members of the European Parliament have called for Microsoft to abandon its internal use of products and switch to European solutions. Their initiative stems from growing concerns about the...

Hi everyone… my name is Marco, I’m 37 years old and I work as an administrative clerk in an accounting firm. This is my first time speaking in front of you all, and I’m a little emotional… and...

A nearly forgotten service command has returned to prominence after being spotted in new Windows device infection patterns. For decades considered a relic of the early days of the internet, the mechan...

On the porch of an old cabin in Colorado, Mark Gubrud , 67, gazes absently into the distant dusk, his phone beside him, the screen still on a news app. As we know, tech giants Microsoft and OpenAI ann...
FIDO Downgrade Attacks, a New Authentication Threat
Mozilla Fixes Dangerous RCE Bug in Firefox 142
Spyware under fire! Apple releases a critical patch for a 0day used on iOS and iPadOS
LastPass, 1Password, and Keeper under fire! Widespread zero-day bugs detected, putting millions of users at risk.
Zero-Day RCE Exploit for Windows Selling for $125,000: How to Protect Yourself
Nike Under Fire! IT Infrastructure Access for Sale from an Initial Access Broker

FIDO Downgrade Attacks, a New Authentication Threat
Redazione RHC - August 20th, 2025
Proofpoint researchers have identified a sophisticated downgrade attack that could bypass FIDO-based authentication, exposing targets to adversary-in-the-middle (AiTM) threats.These are some of the key findings the researchers found: Using a...

Mozilla Fixes Dangerous RCE Bug in Firefox 142
Redazione RHC - August 20th, 2025
Mozilla has fixed several high-severity security bugs with the release of Firefox 142, preventing attackers from remotely executing code of their choosing on affected systems. The security advisory, published on...

Spyware under fire! Apple releases a critical patch for a 0day used on iOS and iPadOS
Redazione RHC - August 20th, 2025
Apple has released an urgent security patch for iOS and iPadOS to address a critical zero-day vulnerability. This vulnerability, identified as CVE-2025-43300, has been confirmed to be actively exploited in...

LastPass, 1Password, and Keeper under fire! Widespread zero-day bugs detected, putting millions of users at risk.
Redazione RHC - August 20th, 2025
A cybersecurity expert has identified zero-day vulnerabilities affecting eleven popular password managers, potentially putting tens of millions of users at risk of credential theft with a single malicious click. An...

Zero-Day RCE Exploit for Windows Selling for $125,000: How to Protect Yourself
Redazione RHC - August 20th, 2025
Browsing the dark web can reveal disturbing and alarming ads for those involved in cybersecurity. Recently, we noticed a post offering a zero-day exploit, an extremely dangerous type of tool,...

Nike Under Fire! IT Infrastructure Access for Sale from an Initial Access Broker
Redazione RHC - August 19th, 2025
An Initial Access Broker is selling access to Nike USA servers on a popular underground forum. A recent post on a dark web forum has raised new concerns about the...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE

