Red Hot Cyber. The Cybersecurity Blog
Featured Articles
In its latest update, the tech giant fixed 175 vulnerabilities affecting its core products and underlying systems, including two actively exploited zero-day vulnerabilities , the company said in its l...
Ivanti has published 13 vulnerabilities in its Endpoint Manager (EPM) software , including two high-severity flaws that could allow remote code execution and privilege escalation . Despite the lack of...
Sophos analysts have discovered a complex malware operation by security experts that uses the popular messaging service WhatsApp to spread banking Trojans, targeting Brazilian banks and cryptocurrency...
A critical vulnerability has been identified in the AMD SEV-SNP hardware security architecture, impacting major cloud providers (AWS, Microsoft Azure, and Google Cloud) . This flaw allows malicious hy...
Israeli company NSO Group, developer of the infamous Pegasus spyware , recently came under the control of American investors. A company spokesperson announced that the new funding amounts to tens of m...
Zero-Day Vulnerabilities Found in Cisco IOS and IOS XE: Urgent Updates
Artificial Intelligence: A Double-Edged Sword in Digital Security
Kali Linux 2025.3 is out! A new release with improvements and new tools.
CrowdStrike: Cybersecurity Enters the Age of AI Agents
Critical bug in Salesforce CLI: Arbitrary code execution and SYSTEM access
Google Chrome Zero-Day Vulnerability: CISA Warns and Files Bug on KEV
Zero-Day Vulnerabilities Found in Cisco IOS and IOS XE: Urgent Updates
Redazione RHC - September 25th, 2025
Cisco has disclosed a zero-day vulnerability, tracked as CVE-2025-20352, in its widely used IOS and IOS XE software; this vulnerability appears to be actively exploited. This vulnerability was initially identified...
Artificial Intelligence: A Double-Edged Sword in Digital Security
Redazione RHC - September 25th, 2025
Artificial intelligence is increasingly being described as a double-edged sword, capable of offering enormous advantages but also opening new avenues for digital crime. During the " TRUST AICS - 2025"...
Kali Linux 2025.3 is out! A new release with improvements and new tools.
Redazione RHC - September 24th, 2025
Kali Linux developers have released a new release, 2025.3 , which expands the distribution's functionality and adds ten new penetration testing tools. The update improves deployment processes in virtual environments,...
CrowdStrike: Cybersecurity Enters the Age of AI Agents
Marcello Filacchioni - September 24th, 2025
At Fal.Con 2025, the annual conference that brings together thousands of cybersecurity experts from around the world, CrowdStrike made one thing clear: cyber defense is entering a new era, that...
Critical bug in Salesforce CLI: Arbitrary code execution and SYSTEM access
Redazione RHC - September 24th, 2025
A critical vulnerability in the Salesforce CLI installer (sf-x64.exe) allows attackers to gain arbitrary code execution, privilege escalation, and SYSTEM-level access on Windows systems. The vulnerability exploits the way the...
Google Chrome Zero-Day Vulnerability: CISA Warns and Files Bug on KEV
Redazione RHC - September 24th, 2025
The United States has received an alert from the Cybersecurity and Infrastructure Security Agency (CISA) regarding a highly critical zero-day flaw in Google Chrome, which is currently being exploited in...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE