Red Hot Cyber. The Cybersecurity Blog
40,000 iPhones stolen and shipped to Asia: London police arrest international gang
London police announced that Operation Echosteep has uncovered and dismantled a gang responsible for mass iPhone thefts. Investigators estimate the group is responsible for 40% of all phone thefts in ...
Oracle E-Business Suite Zero-Day Attack: Clop Exploits CVE-2025-61882
Last week, Oracle warned customers of a critical zero-day vulnerability in its E-Business Suite (CVE-2025-61882), which allows remote execution of arbitrary code without authentication. It has now bee...
I Want It All! ChatGPT Ready to Become an Operating System
When Nick Turley joined OpenAI in 2022 to lead the ChatGPT team, he was tasked with transforming enterprise research into a commercial product. He has accomplished this mission remarkably well: today,...
Italian ethical hackers top the podium at the European Cybersecurity Challenge 2025.
From 6 to 9 October 2025, Warsaw hosted the 11th edition of the European Cybersecurity Challenge (ECSC) . In a close competition among 39 teams from EU member states, EFTA countries, candidate countri...
1,000 POS terminals from US and UK stores hacked and put up for auction: “full access” for $55,000
A new ad posted on an underground forum was recently spotted by researchers at the Dark Lab threat intelligence laboratory , clearly demonstrating how active and dangerous the black market for access ...
Ransomware Groups Join Forces: LockBit, DragonForce, and Qilin
Three major ransomware groups— DragonForce, Qilin, and LockBit —have announced an alliance. This is essentially an attempt to coordinate the activities of several major ransomware-as-a-service (RaaS) ...
Is your VPN protecting you or spying on you? 800 free VPNs analyzed with disturbing results.
Millions of people use mobile VPNs to hide their traffic, bypass blocks, and browse the web securely. Research by Zimperium zLabs revealed that a significant number of free apps not only fail to provi...
RediShell: A 13-year-old score 10 RCE has been upgraded to Redis
A 13-year-old critical flaw, known as RediShell , in Redis allows remote code execution (RCE) , giving attackers the ability to gain full control of the underlying host system. The security issue has ...
Italy is a part of the Zero Day world! The first Italian CNAs are Leonardo and Almaviva!
Very little has been said about this event, which I personally consider strategically important and a sign of a major shift in the management of undocumented vulnerabilities in Italy. In March 2024, I...
ChatGPT becomes a social media platform: private messaging is coming soon.
OpenAI appears to be preparing ChatGPT to become a social platform, not just a traditional AI-powered chat app. The company already has Sora 2, which offers a feed of generated videos. Now, signs of a...
Featured Articles

London police announced that Operation Echosteep has uncovered and dismantled a gang responsible for mass iPhone thefts. Investigators estimate the group is responsible for 40% of all phone thefts in ...

Last week, Oracle warned customers of a critical zero-day vulnerability in its E-Business Suite (CVE-2025-61882), which allows remote execution of arbitrary code without authentication. It has now bee...

When Nick Turley joined OpenAI in 2022 to lead the ChatGPT team, he was tasked with transforming enterprise research into a commercial product. He has accomplished this mission remarkably well: today,...

From 6 to 9 October 2025, Warsaw hosted the 11th edition of the European Cybersecurity Challenge (ECSC) . In a close competition among 39 teams from EU member states, EFTA countries, candidate countri...

A new ad posted on an underground forum was recently spotted by researchers at the Dark Lab threat intelligence laboratory , clearly demonstrating how active and dangerous the black market for access ...
Man with amyotrophic lateral sclerosis controls robotic arm with Neuralink
Wave of attacks against Palo Alto Networks: Over 2,200 IPs involved in the new campaign
Qualcomm Acquires Arduino to Strengthen Presence in IoT and Robotics
North Korean hackers steal $2 billion in cryptocurrency in nine months of fraud
Scattered Lapsus$ Hunters: “We’re paying those who bombard corporate executives with emails.”
Redox OS introduces multithreading by default and improves performance.

Man with amyotrophic lateral sclerosis controls robotic arm with Neuralink
Redazione RHC - October 8th, 2025
American Nick Ray , who suffers from amyotrophic lateral sclerosis, described spending three days controlling his robotic arm (ARA) using the Neuralink neural interface. He described it as one of...

Wave of attacks against Palo Alto Networks: Over 2,200 IPs involved in the new campaign
Redazione RHC - October 8th, 2025
Beginning on October 7, 2025, there was a large-scale intensification of targeted attacks against Palo Alto Networks' GlobalProtect access portals, PAN-OS . Over 2,200 unique IP addresses were targeted in...

Qualcomm Acquires Arduino to Strengthen Presence in IoT and Robotics
Redazione RHC - October 8th, 2025
Qualcomm announced on Tuesday the acquisition of Arduino , an Italian company known for producing low-cost programmable printed circuit boards. The company, which will become an independent subsidiary of the...

North Korean hackers steal $2 billion in cryptocurrency in nine months of fraud
Redazione RHC - October 8th, 2025
A North Korean-linked hacking network stole over $2 billion in cryptocurrency in the first nine months of 2025. Elliptic analysts call this the largest amount ever recorded, with three months...

Scattered Lapsus$ Hunters: “We’re paying those who bombard corporate executives with emails.”
Redazione RHC - October 8th, 2025
Renewing their strategy, the Scattered Lapsus$ Hunters group has returned to the forefront with a new and surprising tactic to put pressure on victims. Cybercriminals have promised a $10 cryptocurrency...

Redox OS introduces multithreading by default and improves performance.
Redazione RHC - October 8th, 2025
The developers of the Redox OS operating system, written in Rust, have enabled multithreading support by default for x86 systems. Previously, the feature was experimental, but after some bug fixes,...
Sign up for the newsletter