Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
DeadLock Ransomware Exploits Baidu Antivirus Vulnerability for EDR Bypass
Cisco Talos has identified a new ransomware campaign called DeadLock : attackers are exploiting a vulnerable Baidu antivirus driver (CVE-2024-51324)...
Redazione RHC - 11 December 2025
Cybercrime
VPN Credentials on the Dark Web: A Growing Cybersecurity Threat
In the darkest corners of the internet, the trafficking of stolen data and unauthorized access continues to thrive. A recent...
Redazione RHC - 11 December 2025
Cybercrime
Uncovering Russia’s Cyber Operations: CISM’s Role in DDoS Attacks
What we wrote in the article " Patriotic Code: from DDoSia and NoName057(16) to CISM, the algorithm that shapes youth...
Redazione RHC - 11 December 2025
Cybercrime
Microsoft Outlook RCE Vulnerability: Update Now to Prevent Attacks
A critical remote code execution (RCE) vulnerability in Outlook has been patched by Microsoft, potentially allowing attackers to run malicious...
Redazione RHC - 11 December 2025
Cybercrime
Google Chrome Urgent Update Fixes Zero-Day Vulnerability
An urgent update has been released by Google for the stable version of the Desktop browser, in order to address...
Redazione RHC - 11 December 2025
Cybercrime
EtherRAT Malware Exploits React2Shell Vulnerability with Ethereum C2
Just two days after the critical React2Shell vulnerability was discovered, Sysdig researchers discovered a new malware, EtherRAT, in a compromised...
Redazione RHC - 11 December 2025
Critical React Server Vulnerability: Update Now to Prevent RCE Attacks
Developers and administrators around the world are urgently updating their servers following the discovery of a critical vulnerability in React Server, which allows attackers to remotely execute unauthenticated code with...
Critical Vulnerability in King Addons for Elementor Exploited
During the registration process, a critical security flaw (CVE-2025-8489) in the King Addons WordPress Elementor plugin was exploited by attackers, allowing them to gain administrative privileges via a privilege escalation...
Google Discover AI Headlines: Revolutionizing News Feed or Clickbait Nightmare?
Google is testing AI-generated headlines in its Discover feed, replacing original news headlines with original ones. Sean Hollister, editor-in-chief of The Verge, reported this , noting that short and often...
Storm-0900 Phishing Campaign Spreads XWorm Malware
Over the holiday season, a coordinated attack was detected and blocked by Microsoft Threat Intelligence security analysts, involving tens of thousands of emails crafted to deceive recipients. The cybercriminal group...
Windows 10 Still Running on 1 Billion PCs, Upgrade to Windows 11 Urged
Windows 10 has been officially retired, but it still runs on approximately one billion personal computers worldwide. A significant number of devices are technically ready to upgrade to Windows 11,...
Secure AI Integration in OT Systems: Key Principles and Best Practices
Since ChatGPT's public release in November 2022, artificial intelligence (AI) has been integrated into many aspects of human society. For owners and operators of critical infrastructure, AI can be used...
Aisuru Botnet Unleashes 29.7 Tbps DDoS Attack, Cloudflare Mitigates
A botnet service called Aisuru offers an army of compromised IoT devices and routers to launch high-traffic DDoS attacks. In just three months, the massive Aisuru botnet launched more than...
Critical Vulnerability in Iskra iHUB Devices Exposed
A serious security vulnerability has been discovered in smart metering infrastructure, which could expose utility networks to remote takeover risks. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued...
Roblox Down Russia
Today, the Roblox gaming platform went offline in Russia. However, international services that monitor network outages reported no issues during the same period. The main complaints concerned the inability to...
Inside Lazarus! The fake candidate who fooled North Korean cyber spies
A joint investigation by BCA LTD, NorthScan, and ANY.RUN has exposed one of North Korea's most secretive hacking schemes. Under the guise of routine recruitment, the team monitored how operators...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Vulnerability
Cybercrime