Red Hot Cyber. The Cybersecurity Blog

Facebook Breach 2024: Sensitive User Data Up for Sale by Hacker on Breach Forums
Recently, a threat actor in an underground forum published an alleged data breach. This incident involves the purported exposure of a substantial Facebook user database. The compromised data includes sensitive user information such as full names, profiles, emails, phone numbers,

Taylor Swift’s Tour at Risk: Hacker Demands $2 Million from Ticketmaster for 170k Stolen Barcodes
A cyber incident has hit Ticketmaster, with a malicious actor issuing a ransom demand, threatening to release sensitive data unless a payment of $2 million USD is made. The hacker claims to possess 170,000 barcodes related to Taylor Swift’s ERAS

Critical Apache Tomcat Vulnerability CVE-2024-34750 Could Bring Your Server to a Halt!
The vulnerability CVE-2024-34750 in Apache Tomcat, as described in the security bulletin AL01/240705/CSIRT-ITA, concerns an issue that can be exploited to overload the server’s computing resources, leading to a Denial of Service (DoS). Apache Tomcat is an open-source server that

Threat Actors: Alleged Data Breach of Ukraine Traffic Police
Recently, a threat actor in an underground forum published an alleged data breach. The leak purportedly involves sensitive information from the Ukraine traffic police (GAI). The data, spanning millions of entries, was shared on the forum by a user named

Serious Vulnerability in Windows Systems: Here’s How an Attacker Can Gain Complete Control of Your PC
A severe security vulnerability has been discovered in MSI Center, a widely used software on Windows systems. This flaw, classified as CVE-2024-37726 and with a CVSS score of 7.8 (high), allows a low-privileged attacker to gain complete control of the system. Privilege escalation refers to

Medusa Ransomware claims responsibility for the attack on Harry Perkins Institute
On July 3, 2024, the Australian research institute Harry Perkins was the victim of a ransomware attack claimed by MEDUSA on their official DLS. More than 4.6 Terabytes of CCTV recordings inside the main building are the data being held

Interview with Luca Cadonici: computer and mobile forensics towards a proactive approach against cybercrime
Olivia Terragni - November 11th, 2024
Nowadays, the Digital Forensics is not just a weapon to fight crime but a scientific discipline that "is no longer limited to reactive post-incident analysis but has evolved towards a...

Potential Compromise of a U.S. Military Database
Pietro Melillo - November 6th, 2024
A high-ranking user of BreachForums, known as "GOD," is reportedly selling an alleged database belonging to the U.S. Military, which purportedly contains data on over 385,000 personnel and contractors. This...

Hellcat Claims an Alleged Breach Against Schneider Electric
Pietro Melillo - November 4th, 2024
In recent hours, the ransomware group known as Hellcat has claimed responsibility for an alleged attack against Schneider Electric, a global leader in energy management and automation. This supposed breach...

Herm1t Interview – From VX Heaven to the war gates!
Alessio Stefan - November 4th, 2024
This is the story of Herm1t, founder of VX-Heaven, hacker - currently active in protecting Ukraine from 2014 - and founder of RUH8 in fall 2015, told by means of...
Sign up for the newsletter