Red Hot Cyber. The Cybersecurity Blog
Featured Articles
The other day on LinkedIn, I found myself having a conversation with someone who was seriously interested in the topic of artificial intelligence applied to law. It wasn’t one of those barroom c...
In its latest update, the tech giant fixed 175 vulnerabilities affecting its core products and underlying systems, including two actively exploited zero-day vulnerabilities , the company said in its l...
Ivanti has published 13 vulnerabilities in its Endpoint Manager (EPM) software , including two high-severity flaws that could allow remote code execution and privilege escalation . Despite the lack of...
Sophos analysts have discovered a complex malware operation by security experts that uses the popular messaging service WhatsApp to spread banking Trojans, targeting Brazilian banks and cryptocurrency...
A critical vulnerability has been identified in the AMD SEV-SNP hardware security architecture, impacting major cloud providers (AWS, Microsoft Azure, and Google Cloud) . This flaw allows malicious hy...
Never accept USB flash drives from strangers! A practical example of physical hacking with a USB flash drive.
An SVG file disguised as a PDF led victims to a fake login
Airports shut down, ransomware, four days of chaos, and a suspect arrested. An attack that shook Europe.
One added line of code and thousands of companies hacked. This is the magic of the Supply Chain!
Rhadamanthys Stealer: Introduces an AI feature to extract seed phrases from images
Active Directory nel mirino! Come i criminal hacker rubano NTDS.dit
Never accept USB flash drives from strangers! A practical example of physical hacking with a USB flash drive.
Massimiliano Brolli - September 27th, 2025
Have you ever been told that if you find a USB flash drive on the ground, you shouldn't plug it into your computer? Today, we'll explain why you shouldn't do...
An SVG file disguised as a PDF led victims to a fake login
Redazione RHC - September 27th, 2025
Microsoft Threat Intelligence specialists have identified an attack in which attackers used artificial intelligence for the first time to disguise phishing code. The goal was to steal credentials from companies...
Airports shut down, ransomware, four days of chaos, and a suspect arrested. An attack that shook Europe.
Redazione RHC - September 27th, 2025
On September 19, a major cyber incident occurred in Europe, affecting Collins Aerospace, one of the world's largest aerospace technology suppliers . The attack disrupted airline operations and affected flights...
One added line of code and thousands of companies hacked. This is the magic of the Supply Chain!
Redazione RHC - September 27th, 2025
Developers learned to trust the tools that help their AI assistants handle routine tasks, from sending emails to using databases. But this trust proved vulnerable: the postmark-mcp package, downloaded over...
Rhadamanthys Stealer: Introduces an AI feature to extract seed phrases from images
Redazione RHC - September 26th, 2025
Rhadamanthys is an advanced information stealer that first emerged in 2022. Featuring a rapid development cycle—with at least ten different releases since its inception—the malware is promoted and marketed on...
Active Directory nel mirino! Come i criminal hacker rubano NTDS.dit
Redazione RHC - September 26th, 2025
Active Directory (AD) contains the organization's digital keys: unauthorized access to this service exposes sensitive information and credentials that can lead to a complete domain compromise. Among the most critical...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE