Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
VS Code Extensions Infected with Sophisticated Malware via Typosquatting
A sophisticated malware campaign has been detected within the Visual Studio Code (VS Code) marketplace. Researchers at ReversingLabs (RL) have...
Redazione RHC - 15 December 2025
Cybercrime
NVIDIA Merlin Security Update: Fixing High-Severity Vulnerabilities
NVIDIA has released a significant security update for its Merlin framework, addressing several high-severity vulnerabilities. These vulnerabilities could allow attackers...
Redazione RHC - 15 December 2025
Cybercrime
How Profanity Varies Across Social Media and Cultures
Americans are the most likely to swear on social media, but Australians are more creative in their use of the...
Redazione RHC - 15 December 2025
Cybercrime
GhostFrame Phishing Kit: New Stealthy PhaaS Threat Emerges
Barracuda has released details of a new stealthy, evasive phishing-as-a-service (PhaaS) kit that hides malicious content within web page iframes...
Redazione RHC - 14 December 2025
Cybercrime
WhatsApp: all it takes is a phone number to know when you sleep, go out, or come home
A tool has been released that allows for the discreet monitoring of WhatsApp and Signal user activity using just a...
Redazione RHC - 14 December 2025
Cybercrime
Cyber Geopolitics: How Tech Becomes a Global Battleground
Over the past two years, cyber has ceased to be a " technical " dimension of the conflict and has...
Roberto Villani - 14 December 2025
Anonymity for Sale: Russian SIM Card Market Thrives Amid Regulations
Efforts by legislators and law enforcement to combat money laundering and more complex SIM card verification procedures have not significantly weakened the position of anonymous number dealers. This conclusion emerges...
Hackers Compromise 120k IP Cameras for Pornographic Videos
South Korean police have reported the arrest of four individuals who, presumably independently, compromised over 120,000 IP cameras. According to investigators, at least two of them did so to steal...
Microsoft Fixes Old Windows LNK Vulnerability Exploited in Attacks
Microsoft has quietly patched a long-standing Windows vulnerability that has been exploited in real-world attacks for several years. The update was released on November's Patch Tuesday, despite the company having...
Critical React Server Vulnerability: Update Now to Prevent RCE Attacks
Developers and administrators around the world are urgently updating their servers following the discovery of a critical vulnerability in React Server, which allows attackers to remotely execute unauthenticated code with...
Critical Vulnerability in King Addons for Elementor Exploited
During the registration process, a critical security flaw (CVE-2025-8489) in the King Addons WordPress Elementor plugin was exploited by attackers, allowing them to gain administrative privileges via a privilege escalation...
Google Discover AI Headlines: Revolutionizing News Feed or Clickbait Nightmare?
Google is testing AI-generated headlines in its Discover feed, replacing original news headlines with original ones. Sean Hollister, editor-in-chief of The Verge, reported this , noting that short and often...
Storm-0900 Phishing Campaign Spreads XWorm Malware
Over the holiday season, a coordinated attack was detected and blocked by Microsoft Threat Intelligence security analysts, involving tens of thousands of emails crafted to deceive recipients. The cybercriminal group...
Windows 10 Still Running on 1 Billion PCs, Upgrade to Windows 11 Urged
Windows 10 has been officially retired, but it still runs on approximately one billion personal computers worldwide. A significant number of devices are technically ready to upgrade to Windows 11,...
Secure AI Integration in OT Systems: Key Principles and Best Practices
Since ChatGPT's public release in November 2022, artificial intelligence (AI) has been integrated into many aspects of human society. For owners and operators of critical infrastructure, AI can be used...
Aisuru Botnet Unleashes 29.7 Tbps DDoS Attack, Cloudflare Mitigates
A botnet service called Aisuru offers an army of compromised IoT devices and routers to launch high-traffic DDoS attacks. In just three months, the massive Aisuru botnet launched more than...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Culture
Cybercrime