Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
Apache Jackrabbit RCE Vulnerability: Exploitation in Progress, Update Now
A dangerous vulnerability has been discovered in Apache Jackrabbit that could lead to remote execution of arbitrary code and compromise...
Redazione RHC - 9 September 2025
Cybercrime
Italian call center companies leave all audio recordings online
Italian companies that use online telephony platforms (VoIP) based on open-source software such as Asterisk and Vicidial rely on these...
Redazione RHC - 9 September 2025
Cybercrime
Tasting the Exploit: HackerHood testa l’exploit di WINRAR CVE-2025-8088
Manuel Roccon, leader of Red Hot Cyber's HackerHood ethics team, has created a detailed video demonstration on YouTube that demonstrates...
Redazione RHC - 9 September 2025
Cybercrime
Hackers bypass the most stringent WAFs with a single line of JavaScript! The moral? Always write securely.
In a security test, Ethiack researchers found a way to bypass even the most stringent web application firewalls using an...
Redazione RHC - 9 September 2025
Cybercrime
Thermoptic: The Tool for Bypassing Fingerprint-Based Lock Systems
Security researcher Matthew Bryant recently unveiled Thermoptic, an innovative tool that acts as an HTTP proxy. This tool can disguise...
Redazione RHC - 9 September 2025
Cybercrime
NightshadeC2, the new botnet that uses unconventional methods to bypass protection
eSentire has reported the discovery of a new botnet called NightshadeC2, which uses unconventional methods to bypass protection and sandboxes....
Redazione RHC - 9 September 2025
Threat Actors 888 claimed a compromise at Credit Suisse
A malicious actor, known by the alias 888, has recently claimed to be selling sensitive data belonging to Credit Suisse, one of the leading institutions in private banking and asset...
Cyber catastrophe in sight? The new Bug on MOVEit has an Online PoC Exploit
In the realm of cybersecurity, vulnerabilities constantly represent a significant risk for businesses and institutions. Many system administrators may recall CVE-2023-34362 from last year, a catastrophic vulnerability in Progress MOVEit...
KillSec Announces New Ransomware-as-a-Service (RaaS) Platform
June 25, 2024 – KillSec, a well-known hacktivist group, has announced the launch of their latest offering on their Telegram channel: KillSec RaaS (Ransomware-as-a-Service). This new platform promises to enhance...
UNZIPPED DATA – LEVI STRAUSS COMPROMISED ACCOUNTS
The legendary Jeans retailer Levi Strauss & Co. identified a significant data breach that affected over 72,000 customers. The incident was discovered on June 13th, 2024 and it was the...
LockBit: The Bluff of Double Extortion Against the Federal Reserve
In recent years, the cybersecurity landscape has been dominated by the growing threat posed by ransomware groups. Among these, LockBit has emerged as one of the most notorious and feared....
Xehook Stealer: The Rise and Sale of a Formidable Stealer Malware
Introduction Xehook Stealer is a sophisticated malware targeting Windows operating systems, first discovered in January 2024. Within a year, Xehook has rapidly gained notoriety for its advanced data collection capabilities...
DataLeak Microsoft: 4GB of Microsoft PlayReady Code Made Public!
On June 11, a Microsoft engineer inadvertently made 4GB of internal code related to Microsoft PlayReady public. The information leak occurred on the Microsoft Developer Community, a forum dedicated to...
Linux Kernel UAF 0-day Vulnerability on sale in the Dark Web
Recently, a security alert shaked the infosec environment: A malicious actor has announced the sale of Use After Free (UAF) 0-day vulnerability affecting the Linux Kernel on the well-known darknet...
WordPress: Five Plugins Found with Malicious Code
On June 24, 2024, Wordfence revealed a supply chain attack on WordPress plugins, leading to the compromise of five plugins with malicious code. The affected plugins are: Social Warfare (versions...
Julian Assange Free! Freedom Reclaimed After Five Years of Detention
London, June 25, 2024 - Julian Assange, the founder of WikiLeaks, was released yesterday from the maximum-security Belmarsh prison after spending 1901 days in detention. The news was announced by...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
innovation
Cybercrime
Cybercrime
Cybercrime
Cybercrime