Red Hot Cyber. The Cybersecurity Blog
When Malware Hides in Videos! The PixelCode Technique Breaks the Rules
PixelCode began as a research project exploring a hidden technique for storing binary data within images or videos . Instead of leaving a plaintext executable, the file is converted into pixel data, t...
CISA alert: Exploit underway against VMware vCenter. Risk of RCE without authentication.
The critical vulnerability recently added to the Cybersecurity and Infrastructure Security Agency (CISA) catalog of known exploited vulnerabilities (KEVs) affects the Broadcom VMware vCenter Server an...
“I Stole 120,000 Bitcoins”: The Confession of the Bitfinex Hacker Who Now Wants to Defend Cyberspace
The story ofIlya Lichtenstein, the hacker responsible for one of the largest cyber attacks ever carried out against cryptocurrencies, reads like an episode of a TV series, yet it is absolutely real. A...
NoName057(16) hits Italy 487 times in the last 3 months: the DDoS wave does not stop
Italy has confirmed itself as one of the main targets of the DDoS attack campaign carried out by the hacktivist group NoName057(16) . According to what was declared directly by the collective, our cou...
Nearly 2,000 bugs in 100 dating apps: How your data can be stolen
A study of 100 dating apps revealed a disturbing picture: nearly 2,000 vulnerabilities were detected, 17% of which were classified as critical. The analysis was conducted by AppSec Solutions. The stud...
MacSync: The macOS malware that empties your wallet… after weeks
A new malware campaign has emerged in the macOS world, one that relies not on sophisticated exploits, but on good old-fashioned social engineering. It’s powered by the MacSync malware, distributed usi...
PurpleBravo’s Contagious Interview: Malware Campaign Targets Global Firms
For over a year, the North Korean group PurpleBravo has been running a targeted malware campaign called “Contagious Interview,” using fake job interviews to attack companies in Europe, Asia, the Middl...
KONNI Malware Targets Crypto Developers with AI-Powered Attacks
Check Point Research recently discovered a sophisticated phishing campaign orchestrated by KONNI , a threat group linked to North Korea . Historically focused on diplomatic targets in South Korea, the...
Cisco Zero-Day Vulnerability CVE-2026-20045 Actively Exploited
A critical zero-day remote code execution (RCE) vulnerability, identified as CVE-2026-20045, has been discovered by Cisco and is being actively exploited in active attacks. Cisco has urged immediate p...
Red Hot Cyber and Hack The Box: together for the CTF at the RHC 2026 conference
In the Italian and European cybersecurity landscape, few collaborations manage to combine educational vision, technical realism, and community impact as effectively as the partnership announced betwee...
Ultime news
Apache Struts 2 Vulnerability CVE-2025-68493 Exposes Sensitive Data
CRISPR-Cas13: Breakthrough in Flu Treatment with Gene Editing
Uncovering Dark AI: The Truth Behind Crime-as-a-Service Chatbots
AI-Generated Mac Malware: SimpleStealth Threatens User Security
Linus Torvalds on AI Coding: ‘It’s Just Another Tool’
The Future of Tech: Sovereignty, Security, and Cloud Control
AI Systems Vulnerable to Attacks: Experts Warn of New Threats
Sandro Sana - January 1st, 2026
China Boosts AI Education with New Strategy to Prepare Students for Digital Age
Luca Vinciguerra - December 31st, 2025
Finland Seizes Ship in Cable Damage Probe, Cites Security Threat
Redazione RHC - December 31st, 2025
Windows X-Lite 11: Optimize Your Old PC with This Lightweight Version
Redazione RHC - December 31st, 2025
Crypto Malware Hacker Extradited to Korea for $1.18M Theft
Redazione RHC - December 31st, 2025
The Dark Side of Convenience: How Digital Payments Threaten Our Privacy
Sandro Sana - December 31st, 2025
Ransomware Attacks on the Rise: US Professionals Turn to Cybercrime
Redazione RHC - December 31st, 2025
Apache StreamPipes Vulnerability: Update to Prevent Admin Takeover
Massimiliano Brolli - December 31st, 2025
The Dark Side of Cybercrime: Human Costs and Consequences
Stefano Gazzella - December 31st, 2025
OpenAI Hiring Chief Security Officer to Mitigate AI Risks
Redazione RHC - December 30th, 2025
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cyber NewsOnce again, Microsoft was forced to quickly fix some flaws. The company has released unscheduled patches for Microsoft Office, addressing a dangerous zero-day vulnerability that has already been exploited in cyberattacks. The issue, identified as…
Cyber NewsThe recent discovery of a vulnerability in ServiceNow’s AI platform has shaken the cybersecurity industry. This flaw, characterized by an extremely high severity score, allowed unauthenticated attackers to impersonate any corporate user. To launch the…
CybercrimeA recent leak revealed 149 million logins and passwords exposed online , including accounts for financial services, social media, gaming, and dating sites. The discovery was made by researcher Jeremiah Fowler and shared with ExpressVPN.…
CybercrimePixelCode began as a research project exploring a hidden technique for storing binary data within images or videos . Instead of leaving a plaintext executable, the file is converted into pixel data, transforming each byte…
Cyber NewsSecurity researchers have recently observed a worrying evolution in the offensive tactics attributed to North Korean-linked actors as part of the campaign known as Contagious Interview : no longer simple fake job interview scams, but…












