Red Hot Cyber. The Cybersecurity Blog

Hospitals tremble! Ransomcortex arrives. ransomware gang targeting healthcare facilities
Recently, the landscape of cyber threats has been enriched by the emergence of a new ransomware group named “Ransomcortex”. This group is distinguished by its specialization in attacking healthcare facilities, having already collected four victims within a few days of

RHC interviews Vanir Group. Former affiliates of LockBit, Karakurt and Knight united to extort money: ‘Hire professionals, don’t be cheap’
New threat actors often emerge every day to destabilize the digital foundations of organizations around the world. One of the most recent and disturbing cybergangs uncovered by Darklab of Red Hot Cyber team is the VANIR group, a collective known

End of an Era: SiegedSec, the Hacker Group, Announces Its Dissolution
The cybercriminal group SiegedSec, which gained notoriety during Russia’s invasion of Ukraine, has recently announced its dissolution. This group, led by “YourAnonWolf,” quickly consolidated its power by increasing the number of its victims. Describing themselves as “gay furry hackers,” SiegedSec

Alleged Data Breach of the United States Department of Defense and National Security Agency
Recently, alarming news has emerged on a well-known underground forum regarding alleged data breaches of the United States Department of Defense and the National Security Agency (NSA). The announcements, posted by the user “Gostingr,” have raised concerns among users and

New Ransomware Group “Vanir Group”: Three Victims Immediately in Their Data Leak Site
A new ransomware group, calling themselves “Vanir Group,” has recently made its debut in the cybercrime landscape. This group has quickly garnered attention for the aggressiveness and professionalism of their operations, hitting three victims in a short time and making

Meow ransomware claims attack in its Data Leak Site at HPE giant
Introduction Today, the ransomware gang known as Meow has claimed responsibility for a cyberattack on the multinational giant Hewlett Packard Enterprise (HPE). The claim was published on their Data Leak Site (DLS), where the group offered access to an alleged

Israeli Air Force Data Sale: A Suspected Leak Puts Sensitive Information at Risk
Pietro Melillo - November 2nd, 2024
Recently, a cyber threat actor known as EagleStrike posted an announcement on a dark web forum, claiming to possess confidential data concerning the Israeli Air Force (IAF). According to the...

IBM Hacked? Threat Actor ‘888’ Reveals Thousands of Employees’ Data Leak!
Luca Galuppi - October 31st, 2024
Recently, the notorious Threat Actor, identified by the nickname 888 , claimed to have breached IBM systems and stolen personal data belonging to the company's employees. The leak, dated October 2024, allegedly resulted in the compromise...

Fortinet Issues Bulletin for Critical 9.8 Bug on FortiManager under Active Exploitation
Redazione RHC - October 24th, 2024
Recently, Fortinet disclosed a critical vulnerability, identified as CVE-2024-47575, affecting FortiManager. This is a missing authentication vulnerability for critical functions [CWE-306] in the FortiManager fgfmd daemon, which could allow an...

US Elections and psy-ops: main threats come from Digital Echo Chambers and erosion of trust in democratic processes
Olivia Terragni - October 22nd, 2024
On November 5th, 2024, the next President and Vice President of the United States of America will be elected, as well as 1/3 of the U.S. Senators and all 435...
Sign up for the newsletter