Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
A $500 Tool Claims to Kill EDRs at Kernel Level: Inside the NtKiller Underground Ad
An ad has surfaced on a closed underground forum frequented by malware operators and initial access brokers, attracting the attention...
Redazione RHC - 25 December 2025
Cybercrime
Webrat Malware Targets Security Researchers with GitHub Exploit Traps
There's a specific moment, almost always at night, when curiosity overtakes caution. A newly opened repository, few stars but a...
Redazione RHC - 24 December 2025
Cybercrime
Nezha Malware: Abusing Legitimate Tools for Remote Access
There comes a moment, often too late, when you realize the problem didn't come from forcing the door, but from...
Redazione RHC - 24 December 2025
Cybercrime
Massive Cloud Cyberespionage: PCPcat Hits 59,128 Servers in 48 Hours
A large-scale, highly automated cyberespionage campaign is systematically targeting the cloud infrastructure that supports numerous modern web applications. In less...
Redazione RHC - 24 December 2025
Cybercrime
Critical Net-SNMP Vulnerability Exposes Networks to RCE Attacks
A critical vulnerability has been discovered in the Net-SNMP software suite, widely used globally for network management and monitoring. The...
Redazione RHC - 24 December 2025
Cybercrime
A backdoor in NVIDIA code. Three 9.8 bugs plague AI and robotics development systems
When it comes to cybersecurity, you can never be too careful. Furthermore, when we talk about backdoors (or alleged ones),...
Redazione RHC - 24 December 2025
NANOREMOTE Trojan Uses Google Drive for Command and Control
A new multifunctional Windows Trojan called NANOREMOTE uses a cloud file storage service as its command center , making the threat harder to detect and giving attackers a persistent channel...
Microsoft Azure OAuth Attack: ConsentFix Malware Steals Accounts
A new scheme called " ConsentFix " expands the capabilities of the already known ClickFix social media attack and allows Microsoft accounts to be hijacked without a password or multi-factor...
Linux Foundation Launches Agentic AI Foundation with Key Tech Players
The establishment of the Agentic AI Foundation (AAIF), a dedicated fund under the auspices of the Linux Foundation , was jointly announced by several leading companies in the field of...
Disney Invests $1 Billion in OpenAI for Sora Video Deal
Disney will invest $1 billion in OpenAI and officially license its characters for use in its Sora video generator. The deal comes amid a heated debate in Hollywood over how...
Microsoft 365 Okta Phishing Attack: Experts Warn of New Threat
A recent study by Datadog Security Labs reveals an ongoing operation targeting organizations using Microsoft 365 and Okta for single sign-on (SSO) authentication. This operation uses sophisticated techniques to bypass...
React Server Components Vulnerability: Update to Prevent DoS Attacks
The React Server component security saga continues this week. Following the patching of a critical remote code execution (RCE) vulnerability that led to React2shell, researchers have discovered two new vulnerabilities....
Critical Windows PowerShell Vulnerability CVE-2025-54100: Update Now
An urgent security update has been released to address a critical vulnerability in Windows PowerShell that allows attackers to execute malicious code on affected systems. This security flaw, designated CVE-2025-54100,...
Telegram Losing Ground to Crackdown on Cybercrime Activities
Telegram, which over the course of its history has become one of the most popular messaging apps in the world, is gradually losing its status as a convenient platform for...
Notepad++ Vulnerability Fixed: Update to 8.8.9 to Avoid Malware
Notepad++ is often targeted by attackers because the software is popular and widely used. A recently discovered vulnerability in the open-source text and code editor Notepad++ could allow attackers to...
NetSupport RAT Malware Campaign Uncovered: Expert Analysis
Securonix specialists have discovered a multi-layered malware campaign aimed at secretly installing the NetSupport RAT remote access tool . The attack involves a series of carefully hidden stages, each designed...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime