Red Hot Cyber. The Cybersecurity Blog
Featured Articles
Ivanti has published 13 vulnerabilities in its Endpoint Manager (EPM) software , including two high-severity flaws that could allow remote code execution and privilege escalation . Despite the lack of...
Sophos analysts have discovered a complex malware operation by security experts that uses the popular messaging service WhatsApp to spread banking Trojans, targeting Brazilian banks and cryptocurrency...
A critical vulnerability has been identified in the AMD SEV-SNP hardware security architecture, impacting major cloud providers (AWS, Microsoft Azure, and Google Cloud) . This flaw allows malicious hy...
Israeli company NSO Group, developer of the infamous Pegasus spyware , recently came under the control of American investors. A company spokesperson announced that the new funding amounts to tens of m...
Over 1.2 million kilometers of fiber optic cables lie on the ocean floor, long considered solely part of a global telecommunications network. However, distributed acoustic sensing (DAS) technology , r...
Google Chrome: Urgent patch for exploited 0day. Critical vulnerabilities fixed.
Phishing with style! Cybercriminals attach superhero GIFs to malware.
Will this latest article “against” ChatControl be absolutely useless?
Azure Functions in the Spotlight: Legitimate Libraries Used for DLL Sideloading
Linux Hit by Sindoor Dropper: Highly Obfuscated Infection Chain
A manifesto after 72 hours! Will cybercriminals really retreat?
Google Chrome: Urgent patch for exploited 0day. Critical vulnerabilities fixed.
Redazione RHC - September 18th, 2025
Google has taken immediate security action for Chrome browser users globally, targeting four critical vulnerabilities, one of which, a zero-day vulnerability, is currently being actively exploited. Users are therefore urged...
Phishing with style! Cybercriminals attach superhero GIFs to malware.
Redazione RHC - September 18th, 2025
F6 analysts have published a study on a new phishing campaign active from spring 2025. The group, dubbed ComicForm, sent emails containing malicious attachments to Russian, Belarusian, and Kazakh companies...
Will this latest article “against” ChatControl be absolutely useless?
Stefano Gazzella - September 18th, 2025
We had already discussed the proposed "ChatControl" regulation almost two years ago, but given the roadmap currently underway, we find ourselves embarrassed to have to discuss it again. It feels...
Azure Functions in the Spotlight: Legitimate Libraries Used for DLL Sideloading
Redazione RHC - September 18th, 2025
A malicious version of the ISO image named Servicenow-BNM-Verify.iso has been identified on VirusTotal, reported as originating from Malaysia, with virtually no detection. The image contains four files, two visible...
Linux Hit by Sindoor Dropper: Highly Obfuscated Infection Chain
Redazione RHC - September 18th, 2025
Linux systems are being targeted by a recent malware campaign, known as "Sindoor Dropper," which uses advanced spear-phishing techniques and a complex infection process. Victims are tricked with lures related...
A manifesto after 72 hours! Will cybercriminals really retreat?
Redazione RHC - September 18th, 2025
Fifteen of the most notorious cybercriminal groups, including Scattered Spider, ShinyHunters, and Lapsus$, have announced their closure. Their collective statement, published on BreachForums, is the most explicit message from the...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE