Red Hot Cyber. The Cybersecurity Blog
Ultime news
Culture
TIME’s Machine of the Year: How Personal Computer Changed Society
TIME magazine's selection of a "Person of the Year" is a tradition dating back to 1927, when the award was...
Redazione RHC - 26 December 2025
Cybercrime
Livewire Vulnerability Exposed: 130k Apps at Risk of Remote Code Execution
An in-depth security analysis of Livewire , an essential framework for developing dynamic interfaces in Laravel, has revealed a significant...
Redazione RHC - 26 December 2025
Cybercrime
Microsoft Boosts BitLocker with Hardware Acceleration for Enhanced Security
Over the years, Microsoft has strived to keep BitLocker's performance impact within reasonable limits, historically below double digits. The goal...
Redazione RHC - 25 December 2025
Cybercrime
DriverFixer0428: macOS Credential Stealer Linked to North Korea
A thorough static and dynamic analysis has led to the identification of a macOS malware called DriverFixer0428 , classified as...
Redazione RHC - 25 December 2025
Cybercrime
A $500 Tool Claims to Kill EDRs at Kernel Level: Inside the NtKiller Underground Ad
An ad has surfaced on a closed underground forum frequented by malware operators and initial access brokers, attracting the attention...
Redazione RHC - 25 December 2025
Cybercrime
Webrat Malware Targets Security Researchers with GitHub Exploit Traps
There's a specific moment, almost always at night, when curiosity overtakes caution. A newly opened repository, few stars but a...
Redazione RHC - 24 December 2025
NANOREMOTE Trojan Uses Google Drive for Command and Control
A new multifunctional Windows Trojan called NANOREMOTE uses a cloud file storage service as its command center , making the threat harder to detect and giving attackers a persistent channel...
Microsoft Azure OAuth Attack: ConsentFix Malware Steals Accounts
A new scheme called " ConsentFix " expands the capabilities of the already known ClickFix social media attack and allows Microsoft accounts to be hijacked without a password or multi-factor...
Linux Foundation Launches Agentic AI Foundation with Key Tech Players
The establishment of the Agentic AI Foundation (AAIF), a dedicated fund under the auspices of the Linux Foundation , was jointly announced by several leading companies in the field of...
Disney Invests $1 Billion in OpenAI for Sora Video Deal
Disney will invest $1 billion in OpenAI and officially license its characters for use in its Sora video generator. The deal comes amid a heated debate in Hollywood over how...
Microsoft 365 Okta Phishing Attack: Experts Warn of New Threat
A recent study by Datadog Security Labs reveals an ongoing operation targeting organizations using Microsoft 365 and Okta for single sign-on (SSO) authentication. This operation uses sophisticated techniques to bypass...
React Server Components Vulnerability: Update to Prevent DoS Attacks
The React Server component security saga continues this week. Following the patching of a critical remote code execution (RCE) vulnerability that led to React2shell, researchers have discovered two new vulnerabilities....
Critical Windows PowerShell Vulnerability CVE-2025-54100: Update Now
An urgent security update has been released to address a critical vulnerability in Windows PowerShell that allows attackers to execute malicious code on affected systems. This security flaw, designated CVE-2025-54100,...
Telegram Losing Ground to Crackdown on Cybercrime Activities
Telegram, which over the course of its history has become one of the most popular messaging apps in the world, is gradually losing its status as a convenient platform for...
Notepad++ Vulnerability Fixed: Update to 8.8.9 to Avoid Malware
Notepad++ is often targeted by attackers because the software is popular and widely used. A recently discovered vulnerability in the open-source text and code editor Notepad++ could allow attackers to...
NetSupport RAT Malware Campaign Uncovered: Expert Analysis
Securonix specialists have discovered a multi-layered malware campaign aimed at secretly installing the NetSupport RAT remote access tool . The attack involves a series of carefully hidden stages, each designed...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Culture
Cybercrime
Cybercrime