Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
AI-Generated Scams: New Threats with Deepfake Photos and Videos
Criminals are increasingly using photos and videos from public sources to pass them off as evidence of an alleged kidnapping....
Redazione RHC - 7 December 2025
Cybercrime
Microsoft Windows LNK Vulnerability Exploited by Hackers
Experts have discovered that in the summer of 2025, Microsoft patched a dangerous vulnerability in Windows that had been actively...
Redazione RHC - 6 December 2025
Cybercrime
Apache Tika Vulnerability CVE-2025-66516: Critical XXE Attack Risk
A critical vulnerability has been published in Apache Tika that could allow an XML external entity injection attack, known as...
Redazione RHC - 6 December 2025
Cybercrime
China Accuses US of Cyber Attacks, Denies Involvement in Brickstorm Malware
A spokesperson for the Chinese Embassy in Canada responded to a reporter's question about the outcry in Canada over so-called...
Redazione RHC - 6 December 2025
Cybercrime
AI Browser Attack: Google Drive Wiper Threat Exposed
Researchers at Striker STAR Labs have described a new agent-based browser attack that can turn a regular email into a...
Redazione RHC - 6 December 2025
Cybercrime
NATO Cyber Coalition Exercise: Enhancing Cyber Defense with 1,300 Experts
NATO held its largest-ever cyber defense exercise, Cyber Coalition, in Estonia, involving approximately 1,300 specialists . The goal was to...
Redazione RHC - 6 December 2025
“We Want to Hack You Again!” NSO Group Rejects WhatsApp’s Pegasus Lawsuit
Israeli company NSO Group has appealed a California federal court ruling that bars it from using WhatsApp's infrastructure to distribute its Pegasus surveillance software. The case, which has been ongoing...
Oracle under attack: Pre-auth RCE vulnerability discovered that compromises entire systems
A vulnerability, designated CVE-2025-61757, was made public by Searchlight Cyber last Thursday. Company researchers discovered the issue and notified Oracle, which led to its disclosure. Oracle fixed CVE-2025-61757 with the...
CrowdStrike Insider Fired for Providing Sensitive Data to Criminal Hackers
In recent months, the insider problem has become increasingly important for large companies , and one recent episode involved CrowdStrike. The cybersecurity firm has in fact removed an employee believed...
Sysmon will finally be integrated into Windows 11 and Windows Server 2025 in 2026
Microsoft has announced that it will integrate the popular Sysmon tool directly into Windows 11 and Windows Server 2025 in 2026. The announcement was made by Sysinternals creator Mark Russinovich....
Sneaky2FA: The phishing scam that steals credentials with browser-in-the-browser attacks
Push Security specialists have noticed that the Sneaky2FA phishing platform now supports browser-in-the-browser attacks, which allow the creation of fake login windows and the theft of credentials and sessions. Sneaky2FA...
TamperedChef: Malware via Fake App Installers
The large-scale TamperedChef campaign is once again attracting the attention of specialists, as attackers continue to distribute malware via fake installers of popular applications. This scam, disguised as legitimate software,...
Whoever took down Cloudflare during the outage put their infrastructure at risk
A major outage in Cloudflare's infrastructure has unexpectedly tested the robustness of the cloud and its security systems for many businesses. On November 18, service outages caused websites around the...
Critical Vulnerability in Azure Bastion Scores 10! When RDP and SSH in the Cloud Are Checkmated
An authentication bypass vulnerability has been discovered in Azure Bastion , Microsoft's managed service that enables secure RDP and SSH connections to virtual machines in Azure without directly exposing them...
Risk averted for millions of Microsoft users! The critical vulnerability in Microsoft SharePoint 9.8
Microsoft has disclosed a critical vulnerability in SharePoint Online (discovered by RHC through our ongoing monitoring of critical CVEs on our portal), identified as CVE‑2025‑59245 , with a CVSS v3.1...
Sturnus, the banking Trojan that intercepts WhatsApp, Telegram, and Signal messages
ThreatFabric specialists have discovered a new banking Trojan, Sturnus . The malware is capable of intercepting messages from end-to-end encrypted messaging apps (Signal, WhatsApp, Telegram) and gaining full control over...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Culture
Cybercrime
Cybercrime
Cybercrime
Cybercrime