Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
Cloudflare Just Broke the Internet… Again. Centralization Risks Exposed
Cloudflare is back in the spotlight after a new wave of outages that, on December 5, 2025, is affecting several...
Redazione RHC - 5 December 2025
Cybercrime
Chinese Cyber Spies Use Brickstorm Malware to Infiltrate Critical Networks
Chinese cyber spies have been lurking in the networks of critical organizations for years, infecting infrastructure with sophisticated malware and...
Redazione RHC - 5 December 2025
Cybercrime
Splunk Enterprise Vulnerability: CVE-2025-20386 and CVE-2025-20387
Security researchers have discovered two high-risk vulnerabilities (CVE-2025-20386 and CVE-2025-20387, with CVSS severity 8.0) affecting the Splunk Enterprise platform and...
Redazione RHC - 5 December 2025
Cybercrime
Apache HTTP Server Update Fixes Critical Security Vulnerabilities
The Apache Software Foundation has released a significant update for its popular Apache HTTP Server , addressing a total of...
Redazione RHC - 5 December 2025
Cybercrime
Cyber Insurance: Why Basic Hygiene Matters
Cyber insurance has become a topic of discussion on management committees. It's no longer an add-on, but rather an essential...
Redazione RHC - 5 December 2025
Cybercrime
Meta AI WhatsApp Investigation
Nine months after its implementation in Europe, Meta’s conversational artificial intelligence (AI) tool, integrated directly into WhatsApp, will be investigated...
Redazione RHC - 5 December 2025
Google, Amazon, and Meta and Their “Submarine War”
Global traffic, as RHC readers know, travels mostly under the sea. According to TeleGeography, a telecommunications institute, there are more than 530 active submarine optical cable systems worldwide, which together...
TIM and Poste Italiane launch the sovereign cloud: the birth of the Italian-made AI and innovation hub
It was time for Italy to wait for a clear signal in the area of digital sovereignty. The union of two giants like TIM and Poste Italiane represents more than...
An “autonomous” spy campaign was orchestrated by artificial intelligence
An analysis conducted in recent months had highlighted how the evolution of artificial intelligence systems was reaching a critical point for cybersecurity, with capabilities doubling in just six months ....
A 0-day exploit on FortiWeb WAF is actively exploited! And remove the Admin interfaces from the Internet
Attackers are actively exploiting a critical flaw in Fortinet’s FortiWeb web application protection (WAF) system, which could be used as a means to conduct zero-day attacks without prior detection. As...
VLC and its creator receive award for choosing freedom over millions of dollars
Whenever you come across an unknown media file or a strange link that won't open with any standard application, there's always one program that comes to the rescue: VLC ....
What is Misevolution: The Autonomous Evolution of AI Agents, and It’s Not Always Good
Shanghai, November 11, 2025 – A new study conducted by the Shanghai Artificial Intelligence Laboratory , in collaboration with Shanghai Jiao Tong University , Renmin University of China , and...
Tanks are no longer needed: new wars are fought from a laptop
Author: Roberto Villani, Tanslate: Vincenzo Marcovecchio Why will the cyberg wars, indeed the cyber-guerrillas, be more and more present and involve us more and more? The short century, the 1900s...
A 0Day bug for a WordPress plugin sold for 6000 euros in the underground
On one of Russia's most popular forums for buying and selling vulnerabilities and attack tools, the thread appeared as a standard commercial ad, but the content is anything but trivial....
Can a cyber attack reduce a country’s GDP? In the UK, it seems so!
The British economy contracted further in September, largely due to the cyber attack on car manufacturer Jaguar Land Rover (JLR) and its forced closure. A new report from the Office...
Triofox Antivirus Exploited to Install Remote Access Components
Google researchers warn that hackers are exploiting a critical vulnerability in Gladinet Triofox to remotely execute code with SYSTEM privileges, bypassing authentication and gaining complete control of the system. The...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime