Contact
Red Hot Cyber

Cybersecurity, Cybercrime News and Vulnerability Analysis

Home
970x120 Enterprise 1
    Supply Chain Attack: How Notepad++ Was Compromised via CVE-2025-15556
    Manuel Roccon | Cybercrime | 04/02/2026

    In cybersecurity, we often focus on finding complex bugs in source code, ignoring the fact that end-user trust is built on a much simpler foundation: a download link. The Notepad++ incident, now class...

    Microsoft Office under attack: the bug needs to be patched to prevent Russian espionage.
    Bajram Zeqiri | Cyber News | 03/02/2026

    In recent days, APT28 , a well-known Russian-linked hacker group, has intensified its attacks by exploiting a vulnerability in Microsoft Office. The flaw, classified as CVE-2026-21509, was disclosed b...

    Goodbye to NTLM! Microsoft is moving towards a new era of authentication with Kerberos
    Silvia Felici | Cyber News | 01/02/2026

    For over three decades, it has been a silent pillar of the Windows ecosystem. Now, however, NTLM ‘s time seems definitively over. Microsoft has decided to initiate a profound transition that marks the...

    The world’s first humanoid robot store has opened in China. Will we be ready?
    Carolina Vivianti | innovation | 30/01/2026

    At ten o’clock in the morning, in Wuhan, two 1.3-meter-tall humanoid robots begin moving with precision. They turn, jump, and follow a rhythm. It’s the opening signal for the country’s first 7S humano...

    Douglas Engelbart was born today: the man who saw and invented the digital future.
    Massimiliano Brolli | Culture | 30/01/2026

    Sometimes, when you think about it, you wonder how we take the world around us for granted. Like, we click, scroll, type, and it all seems so natural, as if it’s always been there. But no, there was s...

    WhatsApp gets a makeover: “Paranoia” mode arrives (and no, it’s not for everyone).
    Silvia Felici | Cyber News | 29/01/2026

    WhatsApp has decided to toughen up. Not for everyone, not always, but when needed. The decision comes against a backdrop of a now-familiar climate: increasing cyber attacks, espionage that no longer m...

    Beware of “I am not a robot”: the malware trap that uses Google Calendar.
    Bajram Zeqiri | Cybercrime | 29/01/2026

    A new threat is lurking, exploiting our greatest weakness: habit. How many times, in fact, do you find yourself clicking on verification boxes without thinking twice? Now, it seems that malicious peop...

    A blow to the heart of cybercrime: RAMP taken offline. The “temple” of ransomware falls!
    Bajram Zeqiri | Cybercrime | 28/01/2026

    The RAMP (Russian Anonymous Marketplace) forum, one of the main hubs of the international cybercrime underground, has been officially shut down and seized by US law enforcement . The news emerged afte...

    Digital Autonomy: France Says Goodbye to Teams and Zoom by 2027
    Silvia Felici | Cyberpolitics | 28/01/2026

    This isn’t the first initiative to emerge on this front recently. Indeed, we’ve heard several of them, one after the other. And it’s almost inevitable: technological autonomy and national security are...

    And let the phishing begin! Microsoft is taking action against a zero-day exploit already exploited in Office
    Pietro Melillo | Cyber News | 27/01/2026

    Once again, Microsoft was forced to quickly fix some flaws. The company has released unscheduled patches for Microsoft Office, addressing a dangerous zero-day vulnerability that has already been explo...

    Precedente Successivo

    Latest news

    When Attack Discovery Becomes Automated, Detection Stops Scaling Cybercrime

    When Attack Discovery Becomes Automated, Detection Stops Scaling

    For much of the past two decades, cybersecurity has been built on a simple assumption: malicious activity can be detected,...
    Alexander Rogan - January 8, 2026
    VMware ESXi VM Escape Exploit: Advanced Threats Revealed Cyber News

    VMware ESXi VM Escape Exploit: Advanced Threats Revealed

    A new report published by the Huntress Tactical Response Team documents a highly sophisticated intrusion detected in December 2025 ,...
    Silvia Felici - January 8, 2026
    Supply Chain Security: Protect Your Business from Cyber Threats Cyber News

    Supply Chain Security: Protect Your Business from Cyber Threats

    In an increasingly interconnected digital ecosystem, companies depend on networks of suppliers and partners to operate efficiently. However, this interdependence...
    Redazione RHC - January 8, 2026
    CVE-2026-21858: n8n Vulnerability Exposes Thousands of Servers to RCE Vulnerability

    CVE-2026-21858: n8n Vulnerability Exposes Thousands of Servers to RCE

    The vulnerability, identified as CVE-2026-21858, which we recently reported on, affects approximately 100,000 servers worldwide, threatening to expose proprietary API...
    Agostino Pellegrino - January 8, 2026
    Malware PHALT#BLYX Uses Social Engineering and MSBuild to Infect Systems Cyber News

    Malware PHALT#BLYX Uses Social Engineering and MSBuild to Infect Systems

    A cancellation message from Booking.com with a high penalty seems like a typical business practice for hotels and apartments. But...
    Redazione RHC - January 7, 2026
    DevSecOps: Integrating Security into Your Development Process Cybercrime

    DevSecOps: Integrating Security into Your Development Process

    When it comes to application security, there's rarely a single problem. It's almost always a chain of small flaws, poor...
    Massimiliano Brolli - January 7, 2026
    « Previous   Next »

    Google and Apple Embrace Interoperability with Android iOS Data Transfer

    Users looking to switch from an iOS to Android ecosystem or vice versa often face less of a challenge than easily transferring photos, conversation logs, and archives from previous devices....

    - December 19th, 2025

    Share on Facebook Share on LinkedIn Share on X

    Ink Dragon Targets Europe: Exploiting SharePoint and IIS Vulnerabilities

    This news comes to us from Recorded Future (Insikt Group) News & Research feed: Check Point Research has documented a new wave of activity attributed to the China-linked threat actor...

    - December 19th, 2025

    Share on Facebook Share on LinkedIn Share on X

    Bypassing AI Safety: EchoGram Exposes Vulnerabilities in LLM Defenses

    Large language models are typically released with security constraints : separate AIs from the main LLM ensure that malicious suggestions aren't passed as input and malicious responses aren't produced as...

    - December 19th, 2025

    Share on Facebook Share on LinkedIn Share on X

    French Police Arrest Suspect in Cyberattack on Interior Ministry

    French law enforcement has arrested a 22-year-old man suspected of carrying out a recent cyberattack on the Ministry of the Interior. The attack occurred in mid-December and targeted the agency's...

    - December 18th, 2025

    Share on Facebook Share on LinkedIn Share on X

    Google Unveils Gemini 3 Flash AI Model, Rivals OpenAI GPT-5.2

    The battle for AI leadership is increasingly moving from the lab to mass production. The day after the release of OpenAI GPT Image 1.5, Google unveiled the Gemini 3 Flash...

    - December 18th, 2025

    Share on Facebook Share on LinkedIn Share on X

    Rise of AI Degrees: Students Shift from Computer Science to AI

    A marked shift in college student preferences is taking place in the United States. More and more young people are choosing degrees in artificial intelligence, abandoning traditional computer science, which...

    - December 18th, 2025

    Share on Facebook Share on LinkedIn Share on X

    SonicWall SMA1000 Vulnerability: Critical Security Patch Released

    Researchers have discovered a vulnerability, identified as CVE-2025-40602, affecting SonicWall's SMA1000 series of secure access gateways. This flaw is particularly concerning because it could allow an attacker to escalate their...

    - December 18th, 2025

    Share on Facebook Share on LinkedIn Share on X

    Ink Dragon Hackers Uncovered: Sophisticated Cyber Espionage Operation

    It was only a matter of time. Governments around the world have now put their security systems on high alert. Indeed, a large-scale espionage operation conducted by a group of...

    - December 18th, 2025

    Share on Facebook Share on LinkedIn Share on X

    Google Discontinues Dark Web Report, Shifts to Active Protection

    No more useless alerts. No more passive monitoring. Less than two years after its launch, Google has decided to shut down one of the most talked-about digital security tools: the...

    - December 17th, 2025

    Share on Facebook Share on LinkedIn Share on X

    CyberVolk Ransomware Flawed: Free File Recovery Possible

    This isn't the first time criminal hackers make mistakes, and it won't be the last. The pro-Russian hacktivist group CyberVolk launched the RaaS service VolkLocker (also known as CyberVolk 2.x)....

    - December 17th, 2025

    Share on Facebook Share on LinkedIn Share on X

    Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE