Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
New AD DS Vulnerability (CVE-2025-21293) Could Hand Hackers the Keys to the Entire Corporate Network
Microsoft recently published a security advisory regarding a new vulnerability affecting Active Directory Domain Services (AD DS). The flaw, identified...
Antonio Piazzolla - 12 September 2025
Cybercrime
Google fights misinformation: C2PA arrives on Pixel and Photos for AI image recognition.
Google announced that it will integrate C2PA Content Credentials technology into the Pixel 10 camera app and Google Photos to...
Redazione RHC - 12 September 2025
Cybercrime
FlexiSPY Alert: The Easy-to-Use Spy App Can Intercept Everything, Even El Chapo
Two Kenyan documentary filmmakers were placed under surveillance by security services for their work on a film about youth protests....
Redazione RHC - 12 September 2025
Cybercrime
SpamGPT is here! The new phishing kit that combines AI, spam, and diabolical genius.
A new tool called SpamGPT has appeared on underground forums and has quickly become a hot topic in the cybersecurity...
Redazione RHC - 11 September 2025
Cybercrime
Critical authentication bypass bug affects Sophos AP6
Sophos has announced that it has fixed a critical authentication bypass vulnerability affecting its AP6 series wireless access points. The...
Redazione RHC - 11 September 2025
Cybercrime
An RCE in Apple CarPlay allows root access to vehicle infotainment systems
At the DefCon security conference, researchers presented a significant exploit chain that allows attackers to gain administrator permissions for vehicle...
Redazione RHC - 11 September 2025
Rivendicato un databreach a Deloitte: credenziali GitHub e codice sorgente finiscono sul dark web
Un attacco informatico ai danni di Deloitte è stato rivendicato dal threat actor “303”, che ha pubblicato su un noto forum underground un post con il titolo inequivocabile: “Deloitte.com Source Code +...
Bringing Your Imagination to Life: AI-Generated Images from Your Description
Remember when you had a vivid image in your mind but struggled to describe it to someone else? Maybe it was a character from a dream, a breathtaking landscape, or...
Apple in the crosshairs: alleged data breach of the Cupertino giant published on XSS
May 14, 2025 – In the early hours of this morning, an alarming post appeared on the Russian underground forum XSS , known to be a leading showcase for the buying and selling...
Why Europe’s healthcare sector must build resilience to fight the threat of ransomware
Author: Andrea Nicelli, Head of Italy and Spain at Resilience Italy’s critical infrastructure is highly exposed to cyber threats, ranking fourth in the world and first in Europe for number...
The Evil Purr – DarkLab Interview to HellCat Ransomware!
HellCat ransomware appeared in the second half of 2024 with and it has attracted the attentions of analysts thanks to the humor within their public statements. We recall the attack...
VanHelsing RaaS: An Expanding Ransomware-as-a-Service Model
The ransomware threat landscape is constantly evolving, with increasingly structured groups adopting sophisticated strategies to maximize profits. VanHelsing is a new player positioning itself in the Ransomware-as-a-Service (RaaS) market, a...
NIST selects second PQC Key Encapsulation algorithm
The fourth round of the American National Institute of Standards and Technology (NIST) Post Quantum Cryptography (PQC) competition has selected HQC as a secondary quantum-resilient key encapsulation mechanism (KEM) to...
Paragon Spyware – Let’s talk about privacy and governments
Politics, information technology, and privacy. A triad continually seeking balance with a history of conflict that originates from the introduction of personal computers at the consumer level. Attempts by the...
Beyond the Dark Storm’s attack on X: how hacktivism’s Illusion reinforces the System
The Dark Storm attack on X (formerly Twitter) has been significant for several reasons. The attack on March 10 2025 - a multi-layered Distributed Denial-of-Service (DDoS) using a botnet -...
Babuk Locker 2.0: The New Ransomware Affiliate Program
Babuk, one of the most notorious ransomware groups in cybercrime, has launched the Babuk Locker 2.0 Affiliate Program 2025, an affiliate program for skilled hackers looking to profit from ransomware...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime