Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
Browser-in-the-Browser Phishing Attack: How to Protect Yourself
This article analyzes a recent and sophisticated phishing campaign that uses the Browser-in-the-Browser (BitB) technique to steal credentials, particularly those...
Manuel Roccon - 29 December 2025
Cybercrime
Critical WebKit Vulnerability Exposes iOS Devices to Code Execution
A new report details a critical vulnerability discovered by security researcher Joseph Goydish in Apple's WebKit engine. This security flaw,...
Redazione RHC - 29 December 2025
Cybercrime
Xspeeder Devices Hit by AI-Discovered Zero-Day Vulnerability CVE-2025-54322
When it comes to cybersecurity, it's easy to fall into the trap of thinking that problems are always far away,...
Redazione RHC - 29 December 2025
Cybercrime
TurboDiffusion: AI Video Generation Accelerated Up to 200 Times
Automatic video generation using artificial intelligence took a significant leap on December 25, 2025, when Tsinghua University announced the open...
Redazione RHC - 29 December 2025
Cybercrime
OpenAI to Introduce ChatGPT Ads, Revolutionizing AI-Powered Marketing
OpenAI is once again discussing the possibility of introducing advertising into ChatGPT , this time in the form of so-called...
Redazione RHC - 29 December 2025
Cybercrime
Job Scams on Social Media: How to Avoid Fake Remote Job Offers
Fraudulent job ads promising easy money and remote work continue to flood social media, particularly in the Middle East and...
Redazione RHC - 29 December 2025
The Psychology of Passwords: Why Weak Passwords Persist
The psychology of passwords starts right here: trying to understand people before systems. Welcome to "The Mind Behind Passwords," the column that looks at cybersecurity. From a different perspective: that...
Russian Cyber Operations Shift to Targeting Western Critical Infrastructure
New details emerge from an Amazon Threat Intelligence report that highlight an alarming shift in Russian government-backed cyber operations. High-level 0-day exploits, often attributed to state-sponsored actors, have seen a...
Google Chrome Security Update Fixes Critical Vulnerabilities
A significant security update has been released by Google for the stable desktop channel, which addresses two very serious vulnerabilities that could expose users to potential memory leak attacks. As...
Spiderman Phishing Kit Targets European Banks and Crypto Users
Varonis researchers have discovered a new PhaaS platform, called Spiderman, that targets users of European banks and cryptocurrency services. Attackers use the service to create copies of legitimate websites to...
AI Smart Glasses for Police: Efficient Vehicle Checks in China
The Changsha traffic police have begun using AI-powered smart glasses in their daily patrols. This was confirmed by the city's Public Security Bureau , which has already distributed the new...
Notepad++ 8.8.9 Released: Fixing Critical Update Vulnerability
A new version, 8.8.9, of the popular text editor Notepad++, has been released by its developers, fixing a flaw in the automatic update system . This issue came to light...
Salt Typhoon Hackers Exposed: Cisco Training Led to Global Telecom Breaches
A recent study by SentinelLabs sheds new light on the roots of the hacker group known as “Salt Typhoon ,” which carried out one of the most audacious espionage operations...
Critical Red Hat OpenShift GitOps Vulnerability Exposed
A critical flaw has been discovered in Red Hat OpenShift GitOps, putting Kubernetes clusters at risk by allowing users with reduced permissions to gain full control of them. OpenShift GitOps...
FortiGate Vulnerability Exploited: Update Now to Prevent SSO Attacks
Threat actors began actively exploiting the high-severity vulnerabilities shortly after the vendor disclosed them to bypass authentication on FortiGate devices. A recent report from Arctic Wolf reveals that, as of...
Shannon: Autonomous Penetration Testing with AI
Shannon acts as a penetration tester who doesn't just report vulnerabilities, but launches actual exploits. Shannon's goal is to breach your web application's security before anyone with malicious intent can....
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime