Red Hot Cyber

Cybersecurity is about sharing. Recognize the risk, combat it, share your experiences, and encourage others to do better than you.
Search

Red Hot Cyber. The Cybersecurity Blog

- June 27th, 2025 - (Posted in Cybercrime and Darknet)
An unusual example of malicious code has been discovered in a real computing environment, which for the first time recorded an attempt to attack not classical defense mechanisms, but directly artificial intelligence systems. We are talking about the prompt injection technique, i.e. the introduction of hidden instructions capable of compromising...
Cybercrime and Darknet

Potential Data Breach: Sensitive Indonesian Data for Sale on Dark Web

A recent alert in information security landscape has been issued: a threat actor has announced the sale of the Attorney General’s Office of the Republic of Indonesia (Kejaksaan Agung Republik Indonesia) database on a well-known dark web forum. The Attorney General’s Office

Cybercrime and Darknet

Threat Actors Post Tennis Tournament Data Breach in Israel

Recently, a threat actor in an underground forum published an alleged data breach. This breach is claimed to have compromised the personal information of thousands of participants and instructors involved in a tennis tournament in Israel. The data includes sensitive

Cybercrime and Darknet

Threat Actors Post Data Breach of SD Biosensor Healthcare Private Limited

A member of BreachForums recently reported a significant data breach involving SD Biosensor Healthcare Private Limited, a company specializing in medical diagnostics. This breach has exposed sensitive information belonging to thousands of individuals. Details of the Breach The breach affected

Bug, 0-day and vulnerability

Critical Vulnerabilities in Splunk Enterprise Enable Remote Code Execution

Splunk, a leading provider of software for searching, monitoring, and analyzing machine-generated big data, has released urgent security updates for its flagship product, Splunk Enterprise. These updates address multiple critical vulnerabilities that pose significant security risks, including the potential for

NSO Group targeted! BlackMeta attacks Spyware maker’s central domain

- August 4th, 2024

The Pro-Palestinian group BlackMeta (or DarkMeta) announced on August 1, 2024, on their official telegram channel that they conducted a destructive attack on the NSO group's infrastructure, including the central...

  

Echelon Stealer: The Open Source Malware

- July 31st, 2024

Echelon Stealer is an infostealer malware that was first discovered in 2018 and is still active. Currently shared as an open-source tool on GitHub, Echelon Stealer offers various advanced features...

  

Ferrari avoids deepfake scam! An executive unmasks the CEO’s fake audio messages

- July 29th, 2024

In an incident earlier this month, a Ferrari executive found himself receiving unusual messages that appeared to come from the company's CEO, Benedetto Vigna. The messages came via WhatsApp, owned...

  

The Ransomware Group Ransomexx Claims Attack on Liteon

- July 26th, 2024

On July 26, 2024, the ransomware group Ransomexx publicly claimed responsibility for an attack against Liteon, a giant in the electronic components sector. This attack is further evidence of the...

  

Sign up for the newsletter