Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
Women in Cybersecurity: Breaking Down Barriers and Stereotypes
The scene is always the same: monitors lit, dashboards full of alerts, logs scrolling too quickly, an anxious customer on...
Ada Spinelli - 15 December 2025
Cybercrime
Storm-0249 Uses DLL Sideloading in Highly Targeted Attacks
A well-known initial access broker (IAB) called " Storm-0249 " has changed its operational strategies, using phishing campaigns as well...
Redazione RHC - 15 December 2025
Cybercrime
VS Code Extensions Infected with Sophisticated Malware via Typosquatting
A sophisticated malware campaign has been detected within the Visual Studio Code (VS Code) marketplace. Researchers at ReversingLabs (RL) have...
Redazione RHC - 15 December 2025
Cybercrime
NVIDIA Merlin Security Update: Fixing High-Severity Vulnerabilities
NVIDIA has released a significant security update for its Merlin framework, addressing several high-severity vulnerabilities. These vulnerabilities could allow attackers...
Redazione RHC - 15 December 2025
Cybercrime
How Profanity Varies Across Social Media and Cultures
Americans are the most likely to swear on social media, but Australians are more creative in their use of the...
Redazione RHC - 15 December 2025
Cybercrime
GhostFrame Phishing Kit: New Stealthy PhaaS Threat Emerges
Barracuda has released details of a new stealthy, evasive phishing-as-a-service (PhaaS) kit that hides malicious content within web page iframes...
Redazione RHC - 14 December 2025
DeepSeekMath-V2 Revolutionizes Math with AI-Powered Proof Verification
The Chinese company DeepSeek has introduced a new specialized model for solving mathematical problems , DeepSeekMath-V2. This large-scale language model, specifically designed for theorem proving and Olympiad problems, is unique...
Shai-Hulud Attack: npm Supply Chain Compromised Again
The npm ecosystem is once again at the center of a large-scale supply chain attack attributed to the Shai-Hulud campaign. This wave has led to the release of hundreds of...
ChatGPT to Introduce Targeted Ads, Changing Monetization Strategy
Until now, ChatGPT has been ad-free: no banners, no hidden promotions. Even the paid versions worked without pushy offers. But that could change soon. As reported by user X (formerly...
GitLab Security Updates Fix High-Severity Vulnerabilities CVE-2024-9183
GitLab has released critical security updates for its Community Edition (CE) and Enterprise Edition (EE) to address several high-severity vulnerabilities . The newly released patches 18.6.1, 18.5.3, and 18.4.5 address...
Apache SkyWalking Vulnerability Exposes Users to XSS Attacks
A vulnerability was recently discovered in Apache SkyWalking , a popular application performance monitoring tool, that attackers could exploit to execute malicious scripts and launch cross-site scripting (XSS) attacks ....
Bloody Wolf Attacks Central Asia with NetSupport RAT via Java Exploits
Group-IB specialists have recorded new attacks by the Bloody Wolf hacker group, which has been targeting Kyrgyzstan since June 2025 and has expanded its operations to Uzbekistan since October. The...
WhatsApp Blocked in Russia: Messaging App Faces Crackdown
The Russian Federation's Roskomnadzor has announced that it continues to impose systematic restrictions on the messaging app WhatsApp due to violations of Russian law. According to the agency, the service...
CEO Scam: How to Protect Your Company from Business Email Compromise
This morning, Paragon Sec was contacted by an Italian company that had been the victim of a new fraud attempt known as the CEO Scam . The accounting department received...
Shai-Hulud Worm Spreads Beyond npm, Attacks Maven
The Shai-Hulud worm has spread beyond the npm ecosystem and was discovered in Maven . Socket specialists noticed an infected package on Maven Central containing the same malicious components used...
11.7% of jobs could be replaced by artificial intelligence
Artificial intelligence is currently capable of performing work equivalent to 11.7% of US employment . And not just in theory: in terms of monetary value, this value is already comparable...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Culture
Cybercrime
Cybercrime