Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
A $500 Tool Claims to Kill EDRs at Kernel Level: Inside the NtKiller Underground Ad
An ad has surfaced on a closed underground forum frequented by malware operators and initial access brokers, attracting the attention...
Redazione RHC - 25 December 2025
Cybercrime
Webrat Malware Targets Security Researchers with GitHub Exploit Traps
There's a specific moment, almost always at night, when curiosity overtakes caution. A newly opened repository, few stars but a...
Redazione RHC - 24 December 2025
Cybercrime
Nezha Malware: Abusing Legitimate Tools for Remote Access
There comes a moment, often too late, when you realize the problem didn't come from forcing the door, but from...
Redazione RHC - 24 December 2025
Cybercrime
Massive Cloud Cyberespionage: PCPcat Hits 59,128 Servers in 48 Hours
A large-scale, highly automated cyberespionage campaign is systematically targeting the cloud infrastructure that supports numerous modern web applications. In less...
Redazione RHC - 24 December 2025
Cybercrime
Critical Net-SNMP Vulnerability Exposes Networks to RCE Attacks
A critical vulnerability has been discovered in the Net-SNMP software suite, widely used globally for network management and monitoring. The...
Redazione RHC - 24 December 2025
Cybercrime
A backdoor in NVIDIA code. Three 9.8 bugs plague AI and robotics development systems
When it comes to cybersecurity, you can never be too careful. Furthermore, when we talk about backdoors (or alleged ones),...
Redazione RHC - 24 December 2025
CISA Warns of Critical Vulnerabilities in Cisco, SonicWall, and ASUS Devices
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert including three new vulnerabilities in its catalog of exploited cyber threats (KEVs), highlighting that these flaws are currently...
Critical Windows Admin Center Flaw CVE-2025-64669 Exposes Servers to Attack
A security flaw has been discovered in Microsoft's Windows Admin Center (WAC) . Essentially, a permissions error could allow any standard user to take control of a server. The Cymulate...
Ink Dragon Hackers Uncovered: Sophisticated Cyber Espionage Operation
It was only a matter of time. Governments around the world have now put their security systems on high alert. Indeed, a large-scale espionage operation conducted by a group of...
Google Discontinues Dark Web Report, Shifts to Active Protection
No more useless alerts. No more passive monitoring. Less than two years after its launch, Google has decided to shut down one of the most talked-about digital security tools: the...
CyberVolk Ransomware Flawed: Free File Recovery Possible
This isn't the first time criminal hackers make mistakes, and it won't be the last. The pro-Russian hacktivist group CyberVolk launched the RaaS service VolkLocker (also known as CyberVolk 2.x)....
OSINT Ethics and Legality: Navigating Open Source Intelligence
Open Source Intelligence (OSINT) has emerged in recent years as one of the most fascinating, yet most insidious, disciplines in the information and security landscape. Its essence is remarkably simple:...
The Psychology of Passwords: Why Weak Passwords Persist
The psychology of passwords starts right here: trying to understand people before systems. Welcome to "The Mind Behind Passwords," the column that looks at cybersecurity. From a different perspective: that...
Russian Cyber Operations Shift to Targeting Western Critical Infrastructure
New details emerge from an Amazon Threat Intelligence report that highlight an alarming shift in Russian government-backed cyber operations. High-level 0-day exploits, often attributed to state-sponsored actors, have seen a...
Google Chrome Security Update Fixes Critical Vulnerabilities
A significant security update has been released by Google for the stable desktop channel, which addresses two very serious vulnerabilities that could expose users to potential memory leak attacks. As...
Spiderman Phishing Kit Targets European Banks and Crypto Users
Varonis researchers have discovered a new PhaaS platform, called Spiderman, that targets users of European banks and cryptocurrency services. Attackers use the service to create copies of legitimate websites to...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime