Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
Ivanti Endpoint Manager Vulnerabilities: Update Now to Prevent RCE
Ivanti has released an urgent update for its Endpoint Manager (EPM) platform, addressing a set of significant vulnerabilities that could...
Redazione RHC - 10 December 2025
Cybercrime
Malicious VSCode Extensions Steal Crypto Wallets and Browser Sessions
Two malicious extensions have been discovered that infect developers' computers with stealer programs on Microsoft's Visual Studio Code marketplace. The...
Redazione RHC - 10 December 2025
Cybercrime
Windows Cloud Files Mini Filter Vulnerability Under Active Exploitation
A zero-day vulnerability in the Windows Cloud Files Mini Filter driver (cldflt.sys) is currently being actively exploited. Microsoft has released...
Redazione RHC - 10 December 2025
Cybercrime
The Dark Side of AI: How Technology is Being Used to Control Humans
Cory Doctorow says it with the clarity of someone who has studied the consequences of digital capitalism for years: AI,...
Sandro Sana - 10 December 2025
Cybercrime
Gartner Warns: AI-Powered Browsers Pose Significant Security Risks to Businesses
Gartner analysts have urged businesses to temporarily stop using browsers with built-in artificial intelligence (AI) capabilities . In a recent...
Redazione RHC - 10 December 2025
Cybercrime
Asus Hacked: Everest Ransomware Group Claims Data Breach
Asus announced that one of its suppliers had been hacked. Meanwhile, the Everest ransomware group claimed to have stolen a...
Redazione RHC - 10 December 2025
DeepSeekMath-V2 Revolutionizes Math with AI-Powered Proof Verification
The Chinese company DeepSeek has introduced a new specialized model for solving mathematical problems , DeepSeekMath-V2. This large-scale language model, specifically designed for theorem proving and Olympiad problems, is unique...
Shai-Hulud Attack: npm Supply Chain Compromised Again
The npm ecosystem is once again at the center of a large-scale supply chain attack attributed to the Shai-Hulud campaign. This wave has led to the release of hundreds of...
ChatGPT to Introduce Targeted Ads, Changing Monetization Strategy
Until now, ChatGPT has been ad-free: no banners, no hidden promotions. Even the paid versions worked without pushy offers. But that could change soon. As reported by user X (formerly...
GitLab Security Updates Fix High-Severity Vulnerabilities CVE-2024-9183
GitLab has released critical security updates for its Community Edition (CE) and Enterprise Edition (EE) to address several high-severity vulnerabilities . The newly released patches 18.6.1, 18.5.3, and 18.4.5 address...
Apache SkyWalking Vulnerability Exposes Users to XSS Attacks
A vulnerability was recently discovered in Apache SkyWalking , a popular application performance monitoring tool, that attackers could exploit to execute malicious scripts and launch cross-site scripting (XSS) attacks ....
Bloody Wolf Attacks Central Asia with NetSupport RAT via Java Exploits
Group-IB specialists have recorded new attacks by the Bloody Wolf hacker group, which has been targeting Kyrgyzstan since June 2025 and has expanded its operations to Uzbekistan since October. The...
WhatsApp Blocked in Russia: Messaging App Faces Crackdown
The Russian Federation's Roskomnadzor has announced that it continues to impose systematic restrictions on the messaging app WhatsApp due to violations of Russian law. According to the agency, the service...
CEO Scam: How to Protect Your Company from Business Email Compromise
This morning, Paragon Sec was contacted by an Italian company that had been the victim of a new fraud attempt known as the CEO Scam . The accounting department received...
Shai-Hulud Worm Spreads Beyond npm, Attacks Maven
The Shai-Hulud worm has spread beyond the npm ecosystem and was discovered in Maven . Socket specialists noticed an infected package on Maven Central containing the same malicious components used...
11.7% of jobs could be replaced by artificial intelligence
Artificial intelligence is currently capable of performing work equivalent to 11.7% of US employment . And not just in theory: in terms of monetary value, this value is already comparable...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Culture
Cybercrime
Cybercrime
Cybercrime
Cybercrime