Red Hot Cyber
Cybersecurity is about sharing. Recognize the risk, combat it, share your experiences, and encourage others to do better than you.
Search
Banner Ransomfeed 320x100 1
970x20 Itcentric

Author: Redazione RHC

Salesloft Cyber Attack: Chatbot Drift Temporarily Disabled

Salesloft announced that it would temporarily deactivate its AI-powered chatbot Drift on September 5, after several companies were hit by a massive supply chain attack. The incident resulted in the mass theft of authentication tokens. The Salesloft Cyber Attack Recall that last week, it emerged that hackers compromised the sales automation platform Salesloft and stole OAuth and client update tokens from its AI agent Drift, designed for integration with Salesforce (no relation to Salesloft). As Google representatives later reported, the attack lasted from August 8 to 18, 2025, was far-reaching and affected, among other things, Google Workspace data. Salesloft Drift is a

Toha Arrest: The Future of the Black Market After XSS Shuts Down

The arrest of the alleged administrator of the Russian-language forum XSS[.]is, nicknamed Toha, has become a turning point for the entire black market. According to law enforcement, on July 22, 2025, a 38-year-old man was arrested in Ukraine as part of a years-long investigation by the French police, Europol, and Ukrainian intelligence services. The investigation identified him as the organizer of the trade in malicious tools, databases, and illegal access, as well as the beneficiary of ransomware attacks. From the rebirth of DaMaGeLaB to XSS The estimate of the possible profit fluctuates and is controversial, but the amount mentioned exceeds seven million

Digital blackout: Broken undersea cables in the Red Sea slow down Microsoft’s cloud.

On Saturday, Microsoft reported issues with its Azure cloud platform due to the breakage of several international undersea cables in the Red Sea. The outage affected traffic transiting the Middle East and to or from Asian regions, as well as to European regions. At the time of the incident, service degradation began around 1:45 AM ET. The company has diverted traffic to alternate routes, warning of increased delays until repairs are complete. Microsoft engineers are managing the issue in a “multi-capacity” manner Microsoft engineering teams are managing the situation in a “multi-capacity manner” and evaluating additional options to reduce delays during the

Google fined €2.95 billion for abusing its dominant position

The European Commission has fined Google €2.95 billion for abusing its dominant position in the digital advertising market. The regulator said that Google used its influence to promote its own services at the expense of competitors. The European Commission also ordered the company to cease anti-competitive actions and implement mechanisms to reduce the risk of future conflicts of interest. Google disagrees with the decision and has announced its intention to appeal. Lee-Anne Mulholland, the company’s global head of regulatory affairs, called the European Commission’s ruling flawed, stressing that the fine was unjustified and that the planned changes would harm thousands of European

Discover the Dark Web: Access, Secrets, and Helpful Links to the Onion Network

The Dark Web is a part of the internet that cannot be reached with standard browsers (Chrome, Firefox, Edge). To access it, you need to use specific tools like the Tor Browser, which guarantees anonymity and allows you to visit so-called onion services. Many associate the Dark Web solely with criminal activities, but in reality this isn’t the case: it’s a complex environment that hosts both legal and illegal content. But how do you get in, and what resources are available on the dark web that can be used upon first access? How to Access the Dark Web with Tor Browser Accessing

Geoffrey Hinton’s shocking revelations: Better to trust China than Zuckerberg!

Geoffrey Hinton, known as the “godfather of artificial intelligence,” recently shared his thoughts in a panel with the Financial Times. Despite his public image as an “AI whistleblower” after resigning from Google in 2023, Hinton clarified that his decision was driven more by his age and his desire to enjoy retirement than by a sudden breakup. However, he admitted that he took the opportunity to speak openly about the risks associated with artificial intelligence. The conversation, which took place over lunch in London, highlighted his critical stances toward Western governments, particularly the United States, which he accuses of neglecting AI regulation in

Jupiter, the exascale supercomputer that aims to revolutionize AI in Europe

The Jupiter supercomputer, inaugurated at the Jülich Supercomputing Center in Germany, represents a milestone for Europe. It is the continent’s first exascale supercomputer, capable of performing at least one quadrillion calculations per second. With a surface area of 3,600 square meters, equivalent to about half a football pitch, it houses thousands of processor racks and approximately 24,000 Nvidia chips, crucial tools in the field of artificial intelligence. The project required a total investment of 500 million euros, half of which came from the European Union and the other half from Germany. Its power will be available to researchers and companies, offering new

38 million Italian phone numbers for sale on the dark web. It’s smishing!

Seven out of ten Italians have their phone numbers included in this database. But what does it mean to have such a large number of phone numbers concentrated within a given territory today? A new announcement on the Russian-language underground XSS forum, accessible upon submission in its onion version, has raised particular concern within the cybersecurity community. In the post, DarkLab researchers revealed the sale of a huge database containing over 38 million phone numbers of Italian citizens, with a price tag of several thousand dollars. What could a list of phone numbers “in target” The availability of such an archive poses

Apitor, the first robot that helps children do their homework and the whistleblower for China

The U.S. Department of Justice has filed a lawsuit against Apitor Technology, accusing it of secretly collecting children’s location data through a Chinese partner without their parents’ knowledge or consent. The lawsuit stems from a notice from the Federal Trade Commission (FTC) alleging violations of the COPPA rules, which govern protecting children’s personal information online. Apitor produces kits for creating programmable toy robots for children ages 6 to 14. The robots are controlled via a free Android app that requires access to geolocation. However, the app also includes a third-party SDK, JPush, developed by the Chinese company Jiguang (Aurora Mobile). It has

Hackable restaurant robots could serve sushi… at the attacker’s home.

An independent security specialist, known by the nickname BobDaHacker, discovered security flaws in Pudu Robotics (the world’s leading provider of commercial service robots). The vulnerabilities allowed attackers to redirect the robots to any location and force them to execute arbitrary commands. Pudu Robotics is a Chinese company that manufactures robots that perform tasks ranging from serving food in restaurants with BellaBot to operating human-designed systems like elevators with FlashBot. According to Frost & Sullivan, the company held a 23% market share for these devices last year. BobDaHacker discovered he could access the bot control software because administrative access was not blocked. To