Red Hot Cyber. The Cybersecurity Blog
Featured Articles
November 18, 2025 – After hours of widespread disruptions , the incident affecting Cloudflare’s global network finally appears to be nearing resolution. The company announced it has implemented a ...
Two serious vulnerabilities in IBM’s AIX operating system could allow remote attackers to execute arbitrary commands on affected systems, prompting the company to issue important security updates. B...
The room is the same: dim lights, chairs in a circle, thermoses of herbal teas now cold from all the talking and venting. We are Shakerati Anonimi , a group of people who never imagined we’d end up ...
Masimo, an American company that develops medical monitoring technologies, has won another round of litigation with Apple . A federal jury awarded it $634 million for infringing a patent on blood oxyg...
A massive DDoS attack was neutralized by Microsoft Azure on October 24. A single endpoint located in Australia was targeted by the attack, which reached a maximum speed of 15.72 terabits per second (T...
Russian Interior Ministry officials arrested the creators of the Medusa malware
Hikvision Exploiter: The open-source tool for attacking IP cameras
100 Infostealer packages uploaded to NPM using AI hallucinations
Atroposia: The MaaS platform that provides a Trojan with a vulnerability scanner
0day as weapons: sold 8 US defense 0day exploits to Moscow
Critical vulnerability in Blink: a website can block all Chromium-based browsers
Russian Interior Ministry officials arrested the creators of the Medusa malware
Redazione RHC - October 31st, 2025
The Russian programming team behind the Medusa malware has been arrested by officials from the Russian Interior Ministry, with the support of police in the Astrakhan region. According to investigators,...
Hikvision Exploiter: The open-source tool for attacking IP cameras
Redazione RHC - October 31st, 2025
A new open-source tool, known as HikvisionExploiter, was recently updated. This tool is designed to automate cyberattacks against vulnerable Hikvision IP cameras . Designed to facilitate penetration testing operations, this...
100 Infostealer packages uploaded to NPM using AI hallucinations
Redazione RHC - October 30th, 2025
Since August 2024, the PhantomRaven campaign has uploaded 126 malicious packages to npm, which have been downloaded a total of over 86,000 times . The campaign was discovered by Koi...
Atroposia: The MaaS platform that provides a Trojan with a vulnerability scanner
Redazione RHC - October 30th, 2025
Varonis researchers have discovered the Atroposia MaaS (malware-as-a-service) platform. For $200 a month, its customers receive a remote access Trojan with extensive functionality, including remote desktop, file system management, information...
0day as weapons: sold 8 US defense 0day exploits to Moscow
Redazione RHC - October 30th, 2025
Peter Williams, a former employee of the defense contractor, pleaded guilty in US federal court to two counts of theft of trade secrets, admitting to selling eight zero-day vulnerabilities to...
Critical vulnerability in Blink: a website can block all Chromium-based browsers
Redazione RHC - October 30th, 2025
Researcher José Pino has presented a proof-of-concept vulnerability in the Blink rendering engine used in Chromium -based browsers, demonstrating how a single web page can crash many popular browsers and...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE