Red Hot Cyber. The Cybersecurity Blog
Featured Articles
Users noticed that last week Microsoft developers disabled the offline activation method for Windows 11 and 10 via KMS38, which has been used by hackers around the world for years. However, the offici...
Group-IB experts presented a detailed analysis of the long-running UNC2891 campaign, which demonstrated the continuing sophistication of ATM attack schemes. Attention focused on the Raspberry Pi, whic...
Israeli company NSO Group has appealed a California federal court ruling that bars it from using WhatsApp’s infrastructure to distribute its Pegasus surveillance software. The case, which has been o...
A vulnerability, designated CVE-2025-61757, was made public by Searchlight Cyber last Thursday. Company researchers discovered the issue and notified Oracle, which led to its disclosure. Oracle fixed ...
Microsoft has disclosed a critical vulnerability in SharePoint Online (discovered by RHC through our ongoing monitoring of critical CVEs on our portal), identified as CVE‑2025‑59245 , with a CVSS ...
A bug in ImunifyAV antivirus leads to RCE. 56 million sites at risk.
Discovering Remote Code Execution (RCE). The most feared security bug!
Google, Amazon, and Meta and Their “Submarine War”
TIM and Poste Italiane launch the sovereign cloud: the birth of the Italian-made AI and innovation hub
An “autonomous” spy campaign was orchestrated by artificial intelligence
A 0-day exploit on FortiWeb WAF is actively exploited! And remove the Admin interfaces from the Internet
A bug in ImunifyAV antivirus leads to RCE. 56 million sites at risk.
Redazione RHC - November 14th, 2025
A vulnerability has been discovered in the Linux hosting ecosystem : the ImunifyAV malware scanner has been found to be vulnerable to remote code execution (RCE). The issue affects the...
Discovering Remote Code Execution (RCE). The most feared security bug!
Manuel Roccon - November 14th, 2025
Of all the vulnerabilities, the most feared by victims and the most sought after by attackers is remote code execution, or RCE. This vulnerability allows arbitrary commands to be executed...
Google, Amazon, and Meta and Their “Submarine War”
Redazione RHC - November 14th, 2025
Global traffic, as RHC readers know, travels mostly under the sea. According to TeleGeography, a telecommunications institute, there are more than 530 active submarine optical cable systems worldwide, which together...
TIM and Poste Italiane launch the sovereign cloud: the birth of the Italian-made AI and innovation hub
Redazione RHC - November 14th, 2025
It was time for Italy to wait for a clear signal in the area of digital sovereignty. The union of two giants like TIM and Poste Italiane represents more than...
An “autonomous” spy campaign was orchestrated by artificial intelligence
Redazione RHC - November 14th, 2025
An analysis conducted in recent months had highlighted how the evolution of artificial intelligence systems was reaching a critical point for cybersecurity, with capabilities doubling in just six months ....
A 0-day exploit on FortiWeb WAF is actively exploited! And remove the Admin interfaces from the Internet
Redazione RHC - November 14th, 2025
Attackers are actively exploiting a critical flaw in Fortinet’s FortiWeb web application protection (WAF) system, which could be used as a means to conduct zero-day attacks without prior detection. As...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE