Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
Microsoft Boosts BitLocker with Hardware Acceleration for Enhanced Security
Over the years, Microsoft has strived to keep BitLocker's performance impact within reasonable limits, historically below double digits. The goal...
Redazione RHC - 25 December 2025
Cybercrime
DriverFixer0428: macOS Credential Stealer Linked to North Korea
A thorough static and dynamic analysis has led to the identification of a macOS malware called DriverFixer0428 , classified as...
Redazione RHC - 25 December 2025
Cybercrime
A $500 Tool Claims to Kill EDRs at Kernel Level: Inside the NtKiller Underground Ad
An ad has surfaced on a closed underground forum frequented by malware operators and initial access brokers, attracting the attention...
Redazione RHC - 25 December 2025
Cybercrime
Webrat Malware Targets Security Researchers with GitHub Exploit Traps
There's a specific moment, almost always at night, when curiosity overtakes caution. A newly opened repository, few stars but a...
Redazione RHC - 24 December 2025
Cybercrime
Nezha Malware: Abusing Legitimate Tools for Remote Access
There comes a moment, often too late, when you realize the problem didn't come from forcing the door, but from...
Redazione RHC - 24 December 2025
Cybercrime
Massive Cloud Cyberespionage: PCPcat Hits 59,128 Servers in 48 Hours
A large-scale, highly automated cyberespionage campaign is systematically targeting the cloud infrastructure that supports numerous modern web applications. In less...
Redazione RHC - 24 December 2025
The Psychology of Passwords: Why Weak Passwords Persist
The psychology of passwords starts right here: trying to understand people before systems. Welcome to "The Mind Behind Passwords," the column that looks at cybersecurity. From a different perspective: that...
Russian Cyber Operations Shift to Targeting Western Critical Infrastructure
New details emerge from an Amazon Threat Intelligence report that highlight an alarming shift in Russian government-backed cyber operations. High-level 0-day exploits, often attributed to state-sponsored actors, have seen a...
Google Chrome Security Update Fixes Critical Vulnerabilities
A significant security update has been released by Google for the stable desktop channel, which addresses two very serious vulnerabilities that could expose users to potential memory leak attacks. As...
Spiderman Phishing Kit Targets European Banks and Crypto Users
Varonis researchers have discovered a new PhaaS platform, called Spiderman, that targets users of European banks and cryptocurrency services. Attackers use the service to create copies of legitimate websites to...
AI Smart Glasses for Police: Efficient Vehicle Checks in China
The Changsha traffic police have begun using AI-powered smart glasses in their daily patrols. This was confirmed by the city's Public Security Bureau , which has already distributed the new...
Notepad++ 8.8.9 Released: Fixing Critical Update Vulnerability
A new version, 8.8.9, of the popular text editor Notepad++, has been released by its developers, fixing a flaw in the automatic update system . This issue came to light...
Salt Typhoon Hackers Exposed: Cisco Training Led to Global Telecom Breaches
A recent study by SentinelLabs sheds new light on the roots of the hacker group known as “Salt Typhoon ,” which carried out one of the most audacious espionage operations...
Critical Red Hat OpenShift GitOps Vulnerability Exposed
A critical flaw has been discovered in Red Hat OpenShift GitOps, putting Kubernetes clusters at risk by allowing users with reduced permissions to gain full control of them. OpenShift GitOps...
FortiGate Vulnerability Exploited: Update Now to Prevent SSO Attacks
Threat actors began actively exploiting the high-severity vulnerabilities shortly after the vendor disclosed them to bypass authentication on FortiGate devices. A recent report from Arctic Wolf reveals that, as of...
Shannon: Autonomous Penetration Testing with AI
Shannon acts as a penetration tester who doesn't just report vulnerabilities, but launches actual exploits. Shannon's goal is to breach your web application's security before anyone with malicious intent can....
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime