Red Hot Cyber. The Cybersecurity Blog
Featured Articles
A vulnerability, designated CVE-2025-61757, was made public by Searchlight Cyber last Thursday. Company researchers discovered the issue and notified Oracle, which led to its disclosure. Oracle fixed ...
Microsoft has disclosed a critical vulnerability in SharePoint Online (discovered by RHC through our ongoing monitoring of critical CVEs on our portal), identified as CVE‑2025‑59245 , with a CVSS ...
The ransomware landscape is changing. The most exposed actors—LockBit, Hunters International, and Trigona—have paid the price for overexposure, including international operations, infiltrations, d...
A critical vulnerability, CVE-2025-9501, has been discovered in the popular WordPress plugin W3 Total Cache . This vulnerability allows the execution of arbitrary PHP commands on the server without au...
Exactly 40 years ago, on November 20, 1985, Microsoft released Windows 1.0 , the first version of Windows, which attempted to transform the then-personal computer from a machine with a monotonous comm...
Highly advanced, adaptive malware uses AI to confuse security defenses
An AI extension for VS Code turns your PC into a digital hostage
The Louvre’s security myth crumbles! Between audits, ridiculous passwords, and outdated cameras.
Double-dealing: employees of a company that resolved ransomware attacks were launching them themselves
Cybersecurity is democratic: the same virus hits multinationals and housewives
2 critical bugs detected on Cisco Unified Contact Center Express (CCX)
Highly advanced, adaptive malware uses AI to confuse security defenses
Redazione RHC - November 7th, 2025
Based on a recent analysis by the Google Threat Intelligence Group (GTIG), a shift has been identified among threat actors over the past year. Continuous improvements in the underground for...
An AI extension for VS Code turns your PC into a digital hostage
Redazione RHC - November 7th, 2025
Secure Annex researchers found a malicious extension in the Visual Studio Code Marketplace extension catalog for VS Code that features basic ransomware functionality. The malware was apparently written using Vibe...
The Louvre’s security myth crumbles! Between audits, ridiculous passwords, and outdated cameras.
Redazione RHC - November 7th, 2025
The recent theft at the Louvre Museum, located in the heart of Paris, has shocked not only the art world but also the cybersecurity world. On the night of October...
Double-dealing: employees of a company that resolved ransomware attacks were launching them themselves
Redazione RHC - November 7th, 2025
Three former DigitalMint employees, who investigated ransomware incidents and negotiated with ransomware groups, are accused of hacking into the networks of five American companies. According to the U.S. Department of...
Cybersecurity is democratic: the same virus hits multinationals and housewives
Fabrizio Saviano - November 7th, 2025
The same malware that yesterday blocked the servers of a major bank today encrypts Mrs. Pina's photos on her home PC. As? With an innocuous WhatsApp message, sent by his...
2 critical bugs detected on Cisco Unified Contact Center Express (CCX)
Redazione RHC - November 7th, 2025
Cisco has published two new critical vulnerabilities affecting Cisco Unified Contact Center Express (CCX) , the platform used by thousands of companies to manage contact centers and unified communications. The...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE