Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
BadAudio Discovered: Ghost Malware Used by APT24 for Three Years Undetected
Researchers at the Google Threat Intelligence Group (GTIG) have uncovered details of an espionage campaign conducted by the Chinese group...
Redazione RHC - 24 November 2025
Cybercrime
Satoshi Nakamoto’s Net Worth Drops 34% as Cryptocurrency Crash
The net worth of Satoshi Nakamoto, the mysterious figure known as the founder of Bitcoin, has dropped 34% in the...
Redazione RHC - 24 November 2025
Cybercrime
Cyberattack on Eurofiber France: Find out what happened
On November 13, Eurofiber France, a respected provider of fiber optic network and VPN solutions to many of France's leading...
Redazione RHC - 24 November 2025
Cybercrime
From Risk to Resilience: How Veeam Protects Your Supply Chain from Disruptions
With the increasing digitalization of the supply chain , resilience is no longer just about logistics and suppliers, but also...
Redazione RHC - 24 November 2025
Cybercrime
When the Cloud Falls: How a Small Mistake Brought the Global Internet to Its Knees
This fall, we've had quite a bit of a cloud headache, I don't know if you've noticed. That is, AWS,...
Gaia Russo - 24 November 2025
Cybercrime
Father and son break world speed record with homemade drone
This summer, in the Dubai desert, a flight occurred that few expected to see from a battery-powered quadcopter. The experimental...
Redazione RHC - 23 November 2025
Undersea Cables, the New Hybrid War: Jaroslav Nad’s Alarm
Taiwan is critically dependent on its undersea infrastructure, which is essential for communications and power supply . In recent years, however, there have been a series of incidents of damage...
Apache OpenOffice under ransomware attack, but the foundation disputes
The Apache OpenOffice project has come under scrutiny after the Akira ransomware group claimed to have carried out a cyberattack and stolen 23 gigabytes of internal data. However, the organization...
Microsoft Exchange Server Penetration Testing: Techniques, Tools, and Countermeasures
Often, during penetration testing, we find ourselves with elevated access (Domain Admin) within an organization. Some companies stop there, thinking that obtaining Domain Admin is the ultimate goal. But it's...
Notepad++ under attack! How a fake DLL opens the door to criminal hackers
A new vulnerability affecting Notepad++ was released in September. The vulnerability has been identified as CVE-2025-56383, and details can be found on the NIST website. CVE-2025-56383 is a DLL hijacking...
Microsoft warns: Security updates cause problems with BitLocker
Microsoft has issued an urgent warning to Windows operating system users regarding a potential issue that, starting with security updates distributed on October 14, 2025, could cause some devices to...
A dangerous zero-day zero-click exploit threatens billions of Android devices
Google has issued an urgent advisory regarding a critical vulnerability in Android that allows attackers to execute arbitrary code on the device without any user interaction. The Zero Click vulnerability...
Is the era of paywalls over? Smart browsers circumvent them, and controlling them is very difficult
How can publishers protect themselves from AI-powered "smart" browsers if they look like ordinary users? The emergence of new AI-powered "smart" browsers is challenging traditional methods of protecting online content....
Danger for OneDrive users: Infected DLLs hide in shared files
Attackers are using an advanced technique involving sideloading DLLs via the Microsoft OneDrive application. This allows them to execute malicious code undetected by security mechanisms. The attack uses a modified...
ArXiv blocks articles generated by AI
arXiv, one of the most important repositories of scientific preprints , has revealed some disturbing facts following growing concerns in the scientific community regarding the uncontrolled use of generative artificial...
CISA Warns! New Bugs in Gladinet, Control Web Panel, and WordPress Expose Systems
Two vulnerabilities related to Gladinet and Control Web Panel (CWP) have been added to the U.S. Cybersecurity and Infrastructure Security Agency (CISA) catalog of known exploited vulnerabilities (KEVs), due to...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Culture
Cybercrime
Cybercrime
Cybercrime