Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
WiFi Network Security: Protect Against Hacking with WPA3 and ARP Spoofing
In today's environment, securing a network requires much more than setting a complex password. A cyber attack against a wireless...
Francesco Demarcus - 2 December 2025
Cybercrime
ShadyPanda Malware Infects 4.3M Browsers with Chrome Edge Extensions
Researchers at Koi Security described a multi-stage operation called ShadyPanda . Over the course of seven years, attackers released seemingly...
Redazione RHC - 2 December 2025
Cybercrime
The Dark Side of Internet Control: Durov’s Warning
Post 462 on Durov's official channel immediately went into “scream mode”: “ The end of the free internet. The free...
Sandro Sana - 2 December 2025
Cybercrime
Phishing Attacks Surge in Black Friday Season: Stay Vigilant
This year, too, cybercriminals are taking advantage of seasonal shopping periods to spread phishing websites and fraudulent promotions, aiming to...
Redazione RHC - 2 December 2025
Cybercrime
Human Washing Machine Launched: Japan’s Science Unveils Unique Device
Japanese company Science has launched a washing machine for humans. The 2.30-meter-long capsule bathes a person in 15 minutes and...
Redazione RHC - 1 December 2025
Cybercrime
Brazilian Systems Targeted in Sophisticated OAST Exploit Campaign
Security researchers have discovered a sophisticated exploit campaign that leverages a private out-of-band application security testing (OAST) service hosted on...
Redazione RHC - 1 December 2025
Synology fixes a zero-day bug in BeeStation OS. Researchers receive $40,000.
Synology has patched a zero-day vulnerability in its BeeStation devices, demonstrated during the recent Pwn2Own competition. The bug, identified as CVE-2025-12686, falls under the category of "buffer copying without input...
Connecting to public Wi-Fi? Even HTTPS isn’t safe! Let’s find out with this tutorial.
Many people believe that accessing only HTTPS sites is enough to ensure security when browsing on unsecured Wi-Fi networks. Spoiler alert: this belief is also a false sense of security....
Myths and DNS Spoofing: If I Don’t Make Payments or Log In Online, Am I Really Safe?
It's often thought that avoiding online dangers is as simple as not making payments or entering credentials while browsing. This approach, while seemingly prudent, is profoundly flawed for several reasons—especially...
Protecting your WiFi by hiding the name? This is a false sense of security
Security, especially when it comes to WiFi networks, is often the subject of misunderstandings and clichés. In this series of articles in our WiFI column , we aim to debunk...
Open WiFi Networks: A Fertile Ground for Cybercrime
Nowadays, the proliferation of portable, wearable, and other smart devices has made data exchange, access to resources, and web browsing indispensable. This in-depth look at Wi-Fi focuses on a widely...
Midnight Ransomware: A free decryptor has been released thanks to a bug in the code.
Researchers have discovered a vulnerability in the new Midnight ransomware , based on the old Babuk source code. The malware is marketed as an "advanced" version of the malware, but...
NetScaler ADC and Gateway Vulnerable: Urgent Updates to Prevent XSS Attacks
NetScaler and Citrix - On November 11, 2025, released security bulletin CTX695486 regarding the CVE-2025-12101 vulnerability, which affects the NetScaler ADC and NetScaler Gateway products. The vulnerability is rated "...
LLM: Wikipedia Parasites: The Importance of Humanity in the Age of Artificial Intelligence
In the age of rapid advances in artificial intelligence, Wikipedia's importance as a reliable source of knowledge has become particularly significant. While neural networks generate text, images, and videos, their...
The Accident That Liberated Generative AI. An Analysis of the “Plane Crash” Prompt
A plane crashes in a snowy forest. Some of the passengers survive, others do not. The survivors are starving, desperate, and find refuge in a village cut off from the...
OWASP Top 10 2025: New Web Application Threats, Supply Chain Top Three
After four years, OWASP has updated its TOP 10 list of the most dangerous web application risks, adding two new categories and revising the ranking structure. The organization has released...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime