Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
GhostFrame Phishing Kit: New Stealthy PhaaS Threat Emerges
Barracuda has released details of a new stealthy, evasive phishing-as-a-service (PhaaS) kit that hides malicious content within web page iframes...
Redazione RHC - 14 December 2025
Cybercrime
WhatsApp: all it takes is a phone number to know when you sleep, go out, or come home
A tool has been released that allows for the discreet monitoring of WhatsApp and Signal user activity using just a...
Redazione RHC - 14 December 2025
Cybercrime
Cyber Geopolitics: How Tech Becomes a Global Battleground
Over the past two years, cyber has ceased to be a " technical " dimension of the conflict and has...
Roberto Villani - 14 December 2025
Cybercrime
SOAP Vulnerability in .NET Framework Allows Remote Code Execution
Security researchers have discovered a vulnerability in .NET that could affect several enterprise products and lead to remote code execution....
Redazione RHC - 14 December 2025
Cybercrime
CVE-2025-55182 React Server Components Vulnerability Exploited
A recent report from the Google Threat Intelligence Group (GTIG) illustrates the chaotic results of this information dissemination, highlighting how...
Redazione RHC - 13 December 2025
Cybercrime
Top 25 Software Vulnerabilities 2025: MITRE CWE Ranking and Security Tips
MITRE has released its ranking of the 25 most dangerous software vulnerabilities predicted for 2025, based on data collected through...
Redazione RHC - 13 December 2025
SAP Security Update Fixes Critical Code Injection Vulnerability in Solution Manager
SAP has just released its latest annual security update, which contains 14 new security bug fixes. Among them is a A critical “code injection” flaw in SAP Solution Manager poses...
Passwordless Authentication: The Future of Secure Online Access
Using passwords to access online accounts is no longer as secure as it once was. In fact, passwords are now one of the most common vulnerabilities used by cybercriminals to...
Critical PromptPwnd Vulnerability Exposes AI-Powered GitLab, GitHub Pipelines
A critical vulnerability, identified as "PromptPwnd," affects AI agents that are integrated into the GitLab CI/CD and GitHub Actions pipelines. Through this vulnerability, attackers are able to inject malicious commands...
LLM-Powered Malware: The Future of Autonomous Cyber Threats
Researchers at Netskope Threat Labs have just published a new analysis on the possibility of creating autonomous malware built exclusively from Large Language Models (LLMs), eliminating the need to encode...
Intellexa Exploits Zero-Day Vulnerabilities with Spyware
Despite significant geopolitical challenges, the mercenary spyware industry remains a resilient and persistent threat; in this context, the well-known vendor Intellexa continues to expand its arsenal. A recent report from...
Malaysia Cracks Down on Bitcoin Mining Thefts
Thieves usually target tangible assets: cash or non-cash, jewelry, cars. But with cryptocurrencies, things are much stranger. Malaysian police are hunting down around 14,000 illegal Bitcoin mining companies that have...
Australia Bans Social Media for Under 16s: What You Need to Know
Australia is soon to introduce groundbreaking legislation banning social media access for children under 16, an initiative that will set a precedent worldwide. A similar measure will soon be adopted...
Palo Alto Networks VPN Vulnerability Exploited by Hackers
An increasingly aggressive campaign, directly targeting remote access infrastructure, has prompted threat actors to actively attempt to exploit vulnerabilities in Palo Alto Networks' GlobalProtect VPN portals . On December 5,...
US Brothers Accused of Destroying 96 Databases with AI
The U.S. Department of Justice has accused twin brothers Muneeb and Sohaib Akhter of deleting 96 databases containing sensitive information, including investigative records and documents requested under the Freedom of...
US Seizes Phishing Site Used by Myanmar Scammers to Steal Millions
The U.S. Department of Justice has announced the shutdown of a phishing website used by scammers in Myanmar to steal thousands of dollars from victims. According to the department, the...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Vulnerability
Cybercrime