Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
Critical Windows Vulnerability CVE-2025-59230 Exposed
Windows services dedicated to remote connections have always been an inexhaustible source of "satisfaction" for those involved in cybersecurity, revealing...
Redazione RHC - 15 December 2025
Cybercrime
Women in Cybersecurity: Breaking Down Barriers and Stereotypes
The scene is always the same: monitors lit, dashboards full of alerts, logs scrolling too quickly, an anxious customer on...
Ada Spinelli - 15 December 2025
Cybercrime
Storm-0249 Uses DLL Sideloading in Highly Targeted Attacks
A well-known initial access broker (IAB) called " Storm-0249 " has changed its operational strategies, using phishing campaigns as well...
Redazione RHC - 15 December 2025
Cybercrime
VS Code Extensions Infected with Sophisticated Malware via Typosquatting
A sophisticated malware campaign has been detected within the Visual Studio Code (VS Code) marketplace. Researchers at ReversingLabs (RL) have...
Redazione RHC - 15 December 2025
Cybercrime
NVIDIA Merlin Security Update: Fixing High-Severity Vulnerabilities
NVIDIA has released a significant security update for its Merlin framework, addressing several high-severity vulnerabilities. These vulnerabilities could allow attackers...
Redazione RHC - 15 December 2025
Cybercrime
How Profanity Varies Across Social Media and Cultures
Americans are the most likely to swear on social media, but Australians are more creative in their use of the...
Redazione RHC - 15 December 2025
Leonardo’s Michelangelo Dome: AI-Powered Defense Against Hypersonic Threats
Italian defense company Leonardo has unveiled its new Michelangelo Dome system . According to the company, it is designed to counter hypersonic missiles and mass drone attacks . During the...
Windows 11 Password Issue: Microsoft Warns of Invisible Icon Bug
Microsoft has warned users of a Windows 11 glitch: after the release of updates starting in August 2025 , the password-based sign-in button may disappear from the lock screen. While...
CISA Warns of OpenPLC ScadaBR Vulnerability Exploitation
The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its list of exploited vulnerabilities (KEVs), reporting a new vulnerability affecting OpenPLC ScadaBR , due to ongoing active exploitation indications. This...
The Power of A* Algorithm in Artificial Intelligence and Robotics
Nearly everything artificial intelligence does today is based on a simple but fundamental idea: any problem can be reduced to finding a path from a starting point to a goal....
WhatsApp Messages Contain Hidden GPS Data, Expert Warns
According to computer forensics expert Elom Daniel, WhatsApp messages can contain hidden geolocation data even when the user hasn't intentionally shared their location. He claimed to have received a routine...
DeepSeekMath-V2 Revolutionizes Math with AI-Powered Proof Verification
The Chinese company DeepSeek has introduced a new specialized model for solving mathematical problems , DeepSeekMath-V2. This large-scale language model, specifically designed for theorem proving and Olympiad problems, is unique...
Shai-Hulud Attack: npm Supply Chain Compromised Again
The npm ecosystem is once again at the center of a large-scale supply chain attack attributed to the Shai-Hulud campaign. This wave has led to the release of hundreds of...
ChatGPT to Introduce Targeted Ads, Changing Monetization Strategy
Until now, ChatGPT has been ad-free: no banners, no hidden promotions. Even the paid versions worked without pushy offers. But that could change soon. As reported by user X (formerly...
GitLab Security Updates Fix High-Severity Vulnerabilities CVE-2024-9183
GitLab has released critical security updates for its Community Edition (CE) and Enterprise Edition (EE) to address several high-severity vulnerabilities . The newly released patches 18.6.1, 18.5.3, and 18.4.5 address...
Apache SkyWalking Vulnerability Exposes Users to XSS Attacks
A vulnerability was recently discovered in Apache SkyWalking , a popular application performance monitoring tool, that attackers could exploit to execute malicious scripts and launch cross-site scripting (XSS) attacks ....
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime