Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
US Seizes Phishing Site Used by Myanmar Scammers to Steal Millions
The U.S. Department of Justice has announced the shutdown of a phishing website used by scammers in Myanmar to steal...
Redazione RHC - 8 December 2025
Cybercrime
Digital Literacy in Schools: The Key to Unlocking Students’ Potential
According to Eurostat, in 2023 only 55% of European Union citizens aged 16 to 74 had at least basic digital...
Inva Malaj - 8 December 2025
Cybercrime
OSINT Investigation: Uncovering Digital Evidence
We live in an age of almost mandatory transparency, an age in which every single digital action we take, be...
Alexandro Irace - 8 December 2025
Cybercrime
Europe’s Digital Sovereignty: The Risks of Relying on Non-European Tech
In recent months, two seemingly unrelated events have highlighted an uncomfortable truth: Europe no longer controls its own digital infrastructure...
Redazione RHC - 7 December 2025
Cybercrime
Apple’s Major Shake-Up: Johny Srouji Leaves as Senior VP of Hardware Technologies
Apple is going through a period of major leadership changes , with the departure of key figures who have contributed...
Redazione RHC - 7 December 2025
Cybercrime
Cloudflare Outage: 25 Minutes of Chaos Due to React Server Issue
Cloudflare experienced a significant outage on the morning of December 5, 2025, when at 8:47 a.m. UTC, a portion of...
Redazione RHC - 7 December 2025
Sneaky2FA: The phishing scam that steals credentials with browser-in-the-browser attacks
Push Security specialists have noticed that the Sneaky2FA phishing platform now supports browser-in-the-browser attacks, which allow the creation of fake login windows and the theft of credentials and sessions. Sneaky2FA...
TamperedChef: Malware via Fake App Installers
The large-scale TamperedChef campaign is once again attracting the attention of specialists, as attackers continue to distribute malware via fake installers of popular applications. This scam, disguised as legitimate software,...
Whoever took down Cloudflare during the outage put their infrastructure at risk
A major outage in Cloudflare's infrastructure has unexpectedly tested the robustness of the cloud and its security systems for many businesses. On November 18, service outages caused websites around the...
Critical Vulnerability in Azure Bastion Scores 10! When RDP and SSH in the Cloud Are Checkmated
An authentication bypass vulnerability has been discovered in Azure Bastion , Microsoft's managed service that enables secure RDP and SSH connections to virtual machines in Azure without directly exposing them...
Risk averted for millions of Microsoft users! The critical vulnerability in Microsoft SharePoint 9.8
Microsoft has disclosed a critical vulnerability in SharePoint Online (discovered by RHC through our ongoing monitoring of critical CVEs on our portal), identified as CVE‑2025‑59245 , with a CVSS v3.1...
Sturnus, the banking Trojan that intercepts WhatsApp, Telegram, and Signal messages
ThreatFabric specialists have discovered a new banking Trojan, Sturnus . The malware is capable of intercepting messages from end-to-end encrypted messaging apps (Signal, WhatsApp, Telegram) and gaining full control over...
Disloyal Employees: Fired, Returns to Work, and Resets 2,500 Passwords Without the Company’s Knowledge
An employee has pleaded guilty to hacking into his former employer's network and causing nearly $1 million in damages after being fired. According to the indictment, 35-year-old Maxwell Schultz, who...
MONOLOCK: The new “silent” ransomware group that rejects leak sites and affiliate panels.
The ransomware landscape is changing. The most exposed actors—LockBit, Hunters International, and Trigona—have paid the price for overexposure, including international operations, infiltrations, deliberate leaks, and operational collapses. After years dominated...
Critical vulnerability in the WordPress plugin W3 Total Cache. 430,000 sites at risk!
A critical vulnerability, CVE-2025-9501, has been discovered in the popular WordPress plugin W3 Total Cache . This vulnerability allows the execution of arbitrary PHP commands on the server without authentication....
Hundreds of robots on the march: China presents the new generation of humanoids
Shenzhen -based UBTECH Robotics has publicly demonstrated its new wave of humanoid robots, delivering several hundred of them in a single shipment. The announcement was accompanied by a video that...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime