Red Hot Cyber. The Cybersecurity Blog
Featured Articles
Sophos analysts have discovered a complex malware operation by security experts that uses the popular messaging service WhatsApp to spread banking Trojans, targeting Brazilian banks and cryptocurrency...
A critical vulnerability has been identified in the AMD SEV-SNP hardware security architecture, impacting major cloud providers (AWS, Microsoft Azure, and Google Cloud) . This flaw allows malicious hy...
Israeli company NSO Group, developer of the infamous Pegasus spyware , recently came under the control of American investors. A company spokesperson announced that the new funding amounts to tens of m...
Over 1.2 million kilometers of fiber optic cables lie on the ocean floor, long considered solely part of a global telecommunications network. However, distributed acoustic sensing (DAS) technology , r...
The quote, “We’ll definitely build a bunker before we launch AGI,” that inspired the article, was attributed to a Silicon Valley leader, though it’s unclear who exactly he meant by “we.” T...
GitLab fixes critical vulnerability CVE-2025-6454
Supply Chain Wormable? NPM Packages with Self-Propagating Malware Arrive
The KING of RaidForums remains in limbo. The battle between the US and Portugal over his extradition continues.
Italy under DDoS attack by pro-Russian NoName057(16)? Few disruptions.
Google Chrome: Urgent patch for exploited 0day. Critical vulnerabilities fixed.
Phishing with style! Cybercriminals attach superhero GIFs to malware.
GitLab fixes critical vulnerability CVE-2025-6454
Redazione RHC - September 18th, 2025
The collaborative development platform GitLab has announced the fix for a critical vulnerability, identified as CVE-2025-6454. The issue affected server installations of the Community and Enterprise editions and allowed requests...
Supply Chain Wormable? NPM Packages with Self-Propagating Malware Arrive
Redazione RHC - September 18th, 2025
Security researchers have discovered the compromise of over 180 npm packages, infected with a self-propagating malware designed to infect other packages. The campaign, dubbed Shai-Hulud, likely began with the hack...
The KING of RaidForums remains in limbo. The battle between the US and Portugal over his extradition continues.
Redazione RHC - September 18th, 2025
The High Court in London has overturned the decision to extradite Portuguese citizen Diogo Santos Coelho to the United States. The young man, known by the pseudonym Omnipotent, was the...
Italy under DDoS attack by pro-Russian NoName057(16)? Few disruptions.
Redazione RHC - September 18th, 2025
The hackers of NoName057(16) have recently resumed their hostile activities against several Italian targets, using Distributed Denial-of-Service (DDoS) attacks. Based on what we observed, Italian infrastructure has strengthened its structure,...
Google Chrome: Urgent patch for exploited 0day. Critical vulnerabilities fixed.
Redazione RHC - September 18th, 2025
Google has taken immediate security action for Chrome browser users globally, targeting four critical vulnerabilities, one of which, a zero-day vulnerability, is currently being actively exploited. Users are therefore urged...
Phishing with style! Cybercriminals attach superhero GIFs to malware.
Redazione RHC - September 18th, 2025
F6 analysts have published a study on a new phishing campaign active from spring 2025. The group, dubbed ComicForm, sent emails containing malicious attachments to Russian, Belarusian, and Kazakh companies...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE