Red Hot Cyber. The Cybersecurity Blog

VanHelsing RaaS: An Expanding Ransomware-as-a-Service Model
The ransomware threat landscape is constantly evolving, with increasingly structured groups adopting sophisticated strategies to maximize profits. VanHelsing is a new player positioning itself in the Ransomware-as-a-Service (RaaS) market, a model that enables even cybercriminals with limited expertise to conduct

NIST selects second PQC Key Encapsulation algorithm
The fourth round of the American National Institute of Standards and Technology (NIST) Post Quantum Cryptography (PQC) competition has selected HQC as a secondary quantum-resilient key encapsulation mechanism (KEM) to the previously selected ML-KEM (based on CRYSTALS-Kyber). HQC, or “Hemming

Paragon Spyware – Let’s talk about privacy and governments
Politics, information technology, and privacy. A triad continually seeking balance with a history of conflict that originates from the introduction of personal computers at the consumer level. Attempts by the U.S. government in preventing access to “strong enough” cryptography for

Beyond the Dark Storm’s attack on X: how hacktivism’s Illusion reinforces the System
The Dark Storm attack on X (formerly Twitter) has been significant for several reasons. The attack on March 10 2025 – a multi-layered Distributed Denial-of-Service (DDoS) using a botnet – claimed by by the pro-Palestinian hacktivist group Dark Storm, caused

Babuk Locker 2.0: The New Ransomware Affiliate Program
Babuk, one of the most notorious ransomware groups in cybercrime, has launched the Babuk Locker 2.0 Affiliate Program 2025, an affiliate program for skilled hackers looking to profit from ransomware attacks. This program, published on their data leak site, introduces

NightSpire: A New Player in the Ransomware Landscape
During our reconnaissance into the underground world and criminal groups conducted by Red Hot Cyber’s threat intelligence laboratory DarkLab, we stumbled upon a Data Leak Site of a cyber gang never monitored before: NightSpire. NightSpire is a new ransomware group

Darkcloux 3.0 is here: Securonis Linux becomes more secure (and more extreme) than ever
Redazione RHC - June 22nd, 2025
Securonis Linux has released its most significant update: version 3.0 of "Darkcloux" and the 3.0-r1 patch. The release includes new utilities, redesigned components, and improvements to privacy and security. The main change...

Urobot watches you while you pee (but it’s for your own good)
Redazione RHC - June 22nd, 2025
A Taiwanese hospital is testing Urobot, a smart urinal that instantly analyzes urine and emails the results. Although the device is designed in a "cute" style, social media users have...

Smart TV or Living Room Spies? Here’s How They’re Monitoring You
Redazione RHC - June 22nd, 2025
Many owners of smart TV operating systems are increasingly finding themselves caught in a conflict that rages between the desire to preserve viewer privacy and pressure from the advertising industry....

Massive Windows Crash: The OpenVPN Flaw That Can Knock Out Infrastructures
Redazione RHC - June 22nd, 2025
A critical vulnerability has been discovered in the OpenVPN data channel offload driver for Windows, which can be exploited by local attackers to crash systems. The bug, classified as CVE-2025-50054,...
Sign up for the newsletter