Red Hot Cyber. The Cybersecurity Blog
Ultime news
Vulnerability
Livewire Vulnerability Exposed: 130k Apps at Risk of Remote Code Execution
An in-depth security analysis of Livewire , an essential framework for developing dynamic interfaces in Laravel, has revealed a significant...
Agostino Pellegrino - 26 December 2025
Cyber News
Microsoft Boosts BitLocker with Hardware Acceleration for Enhanced Security
Over the years, Microsoft has strived to keep BitLocker's performance impact within reasonable limits, historically below double digits. The goal...
Redazione RHC - 25 December 2025
Cyber News
DriverFixer0428: macOS Credential Stealer Linked to North Korea
A thorough static and dynamic analysis has led to the identification of a macOS malware called DriverFixer0428 , classified as...
Massimiliano Brolli - 25 December 2025
Cyber News
A $500 Tool Claims to Kill EDRs at Kernel Level: Inside the NtKiller Underground Ad
An ad has surfaced on a closed underground forum frequented by malware operators and initial access brokers, attracting the attention...
Redazione RHC - 25 December 2025
Cyber News
Webrat Malware Targets Security Researchers with GitHub Exploit Traps
There's a specific moment, almost always at night, when curiosity overtakes caution. A newly opened repository, few stars but a...
Redazione RHC - 24 December 2025
Cyber News
Nezha Malware: Abusing Legitimate Tools for Remote Access
There comes a moment, often too late, when you realize the problem didn't come from forcing the door, but from...
Redazione RHC - 24 December 2025
Embracing Vulnerability for Authentic Leadership and Team Growth
We're connected, connected to everything, hyperconnected. Our professional and social lives are dictated by extremely tight deadlines and a constantly rising bar; we must push. We tacitly demand that we...
CISA Warns: Avoid Personal VPNs for Secure Mobile Communications
In new mobile communications advisories, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a stern warning to smartphone owners : avoid using personal VPN services. The document, aimed...
SAP Security Update Fixes Critical Code Injection Vulnerability in Solution Manager
SAP has just released its latest annual security update, which contains 14 new security bug fixes. Among them is a A critical “code injection” flaw in SAP Solution Manager poses...
Passwordless Authentication: The Future of Secure Online Access
Using passwords to access online accounts is no longer as secure as it once was. In fact, passwords are now one of the most common vulnerabilities used by cybercriminals to...
Critical PromptPwnd Vulnerability Exposes AI-Powered GitLab, GitHub Pipelines
A critical vulnerability, identified as "PromptPwnd," affects AI agents that are integrated into the GitLab CI/CD and GitHub Actions pipelines. Through this vulnerability, attackers are able to inject malicious commands...
LLM-Powered Malware: The Future of Autonomous Cyber Threats
Researchers at Netskope Threat Labs have just published a new analysis on the possibility of creating autonomous malware built exclusively from Large Language Models (LLMs), eliminating the need to encode...
Intellexa Exploits Zero-Day Vulnerabilities with Spyware
Despite significant geopolitical challenges, the mercenary spyware industry remains a resilient and persistent threat; in this context, the well-known vendor Intellexa continues to expand its arsenal. A recent report from...
Malaysia Cracks Down on Bitcoin Mining Thefts
Thieves usually target tangible assets: cash or non-cash, jewelry, cars. But with cryptocurrencies, things are much stranger. Malaysian police are hunting down around 14,000 illegal Bitcoin mining companies that have...
Australia Bans Social Media for Under 16s: What You Need to Know
Australia is soon to introduce groundbreaking legislation banning social media access for children under 16, an initiative that will set a precedent worldwide. A similar measure will soon be adopted...
Palo Alto Networks VPN Vulnerability Exploited by Hackers
An increasingly aggressive campaign, directly targeting remote access infrastructure, has prompted threat actors to actively attempt to exploit vulnerabilities in Palo Alto Networks' GlobalProtect VPN portals . On December 5,...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cyber News
Cyber News
Cyber News
Cyber News
Cyber News