Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
La Poste Hit by Pro-Russian DDoS Attack During Peak Holiday Season
According to internal sources at RedHotCyber , the digital offensive that is causing problems for the National Postal System in...
Redazione RHC - 23 December 2025
Cybercrime
Spotify Web Scraping: Anna’s Archive Scrapes 300TB of Music Library
Activists and hackers at Anna's Archive have reportedly combed nearly the entire music library of the largest streaming service, Spotify....
Redazione RHC - 23 December 2025
Vulnerability
CVE-2025-47761: FortiClient VPN Zero-Day Exploit Lets Privilege Escalation
The following analysis examines the attack vector for CVE-2025-47761 , a vulnerability found in the Fortips_74.sys kernel driver used by...
Manuel Roccon - 23 December 2025
Cybercrime
Ukrainian Hacker Charged in Major Ransomware Attacks
A Ukrainian man implicated in a series of ransomware attacks has been found guilty in the United States. These cybercrimes...
Redazione RHC - 23 December 2025
Cybercrime
The Rise of Digital Walls: How National Sovereignty Threatens Global Internet
As we always report on these pages, nations are pushing for the development of domestic software and hardware devices, that...
Redazione RHC - 23 December 2025
Cybercrime
Critical MongoDB Vulnerability Exposed: CVE-2025-14847
A critical vulnerability has been identified in MongoDB, one of the most widely used NoSQL database platforms globally. This security...
Redazione RHC - 23 December 2025
French Interior Ministry Hit by Cyberattack, Data Security at Risk
The French Ministry of the Interior's email servers were targeted by a cyberattack. The hacker managed to access "several files," but no "serious compromise" has been detected so far. The...
IRS.GOV: alleged data breach affects the accounts of 18 million citizens
An alleged database containing sensitive information on 18 million U.S. citizens over 65 has appeared for sale on a popular dark web forum. The advertiser, who uses the pseudonym "Frenshyny,"...
Amnesty International Launches .onion Site for Secure Access to Human Rights Info
Amnesty International has launched its own website, accessible via the .onion domain on the Tor network, offering a new secure channel for accessing the organization's information and research. The initiative,...
NANOREMOTE Trojan Uses Google Drive for Command and Control
A new multifunctional Windows Trojan called NANOREMOTE uses a cloud file storage service as its command center , making the threat harder to detect and giving attackers a persistent channel...
Microsoft Azure OAuth Attack: ConsentFix Malware Steals Accounts
A new scheme called " ConsentFix " expands the capabilities of the already known ClickFix social media attack and allows Microsoft accounts to be hijacked without a password or multi-factor...
Linux Foundation Launches Agentic AI Foundation with Key Tech Players
The establishment of the Agentic AI Foundation (AAIF), a dedicated fund under the auspices of the Linux Foundation , was jointly announced by several leading companies in the field of...
Disney Invests $1 Billion in OpenAI for Sora Video Deal
Disney will invest $1 billion in OpenAI and officially license its characters for use in its Sora video generator. The deal comes amid a heated debate in Hollywood over how...
Microsoft 365 Okta Phishing Attack: Experts Warn of New Threat
A recent study by Datadog Security Labs reveals an ongoing operation targeting organizations using Microsoft 365 and Okta for single sign-on (SSO) authentication. This operation uses sophisticated techniques to bypass...
React Server Components Vulnerability: Update to Prevent DoS Attacks
The React Server component security saga continues this week. Following the patching of a critical remote code execution (RCE) vulnerability that led to React2shell, researchers have discovered two new vulnerabilities....
Critical Windows PowerShell Vulnerability CVE-2025-54100: Update Now
An urgent security update has been released to address a critical vulnerability in Windows PowerShell that allows attackers to execute malicious code on affected systems. This security flaw, designated CVE-2025-54100,...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime