Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
Cloudflare Hit with €14M Fine for Failing to Block Pirate Content
The Italian Communications Regulatory Authority (AGCOM) has imposed an administrative fine exceeding €14 million on Cloudflare Inc. for failure to...
Redazione RHC - 9 January 2026
Cybercrime
Iran Protests Escalate as Reza Pahlavi Calls for Action Against Government
Iranian protesters chanted and marched through the streets until Friday morning, following a call from exiled former Prince Reza Pahlavi...
Redazione RHC - 9 January 2026
Cybercrime
Taiwan Citizens Accused in China of Smuggling and Cable Sabotage
Chinese authorities have formally charged two Taiwanese citizens with involvement in a smuggling operation linked to an incident in February...
Redazione RHC - 9 January 2026
Cybercrime
QR Code Phishing via HTML: New Attack Vector Emerges
We know that criminal hackers always manage to surprise us, and this time too they surprise us with the innovation...
Redazione RHC - 8 January 2026
Cybercrime
Veeam Backup Vulnerability: Critical RCE Flaw Discovered – Update Now
Backups are generally considered the last line of defense, but this week Veeam reminded us that backup systems themselves can...
Redazione RHC - 8 January 2026
Cybercrime
GoBruteforcer Botnet Exploits AI-Generated Server Configs, Targets Crypto
The GoBruteforcer botnet has been discovered to be exploiting a surprisingly current weakness: the widespread reuse of AI-generated server configurations....
Redazione RHC - 8 January 2026
Veeam Backup Vulnerability: Critical RCE Flaw Discovered – Update Now
Backups are generally considered the last line of defense, but this week Veeam reminded us that backup systems themselves can become entry points for attacks. The company released security updates...
GoBruteforcer Botnet Exploits AI-Generated Server Configs, Targets Crypto
The GoBruteforcer botnet has been discovered to be exploiting a surprisingly current weakness: the widespread reuse of AI-generated server configurations. This increasingly widespread practice is effectively leaving tens of thousands...
When Attack Discovery Becomes Automated, Detection Stops Scaling
For much of the past two decades, cybersecurity has been built on a simple assumption: malicious activity can be detected, analysed, and responded to before meaningful damage occurs. This assumption...
VMware ESXi VM Escape Exploit: Advanced Threats Revealed
A new report published by the Huntress Tactical Response Team documents a highly sophisticated intrusion detected in December 2025 , in which an advanced actor managed to compromise a VMware...
Supply Chain Security: Protect Your Business from Cyber Threats
In an increasingly interconnected digital ecosystem, companies depend on networks of suppliers and partners to operate efficiently. However, this interdependence has transformed the supply chain into a new critical cybersecurity...
CVE-2026-21858: n8n Vulnerability Exposes Thousands of Servers to RCE
The vulnerability, identified as CVE-2026-21858, which we recently reported on, affects approximately 100,000 servers worldwide, threatening to expose proprietary API keys, customer databases, and AI workflows. The vulnerability, with a...
Malware PHALT#BLYX Uses Social Engineering and MSBuild to Infect Systems
A cancellation message from Booking.com with a high penalty seems like a typical business practice for hotels and apartments. But it's precisely this type of email that triggered a new...
Disable Windows 11 AI Features Easily with RemoveWindowsAI Tool
A new open-source script allows Windows 11 users to widely disable the operating system's built-in artificial intelligence features . The project, developed by Zoicware , is called RemoveWindowsAI and aims...
DevSecOps: Integrating Security into Your Development Process
When it comes to application security, there's rarely a single problem. It's almost always a chain of small flaws, poor decisions, and missing controls that, when added together, pave the...
Critical RCE Vulnerability in D-Link DSL Routers – Update Now
A critical remote code execution (RCE) flaw in older D-Link DSL routers has been identified as CVE-2026-0625, with a CVSS v4.0 score of 9.3, indicating a high risk for users...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime