Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
React2Shell Vulnerability: 8.7M Servers at Risk – CVE-2025-55182
In 2025, the IT and security communities are buzzing with excitement over a single name: " React2Shell ." With the...
Redazione RHC - 5 December 2025
Cybercrime
Cloudflare Just Broke the Internet… Again. Centralization Risks Exposed
Cloudflare is back in the spotlight after a new wave of outages that, on December 5, 2025, is affecting several...
Redazione RHC - 5 December 2025
Cybercrime
Chinese Cyber Spies Use Brickstorm Malware to Infiltrate Critical Networks
Chinese cyber spies have been lurking in the networks of critical organizations for years, infecting infrastructure with sophisticated malware and...
Redazione RHC - 5 December 2025
Cybercrime
Splunk Enterprise Vulnerability: CVE-2025-20386 and CVE-2025-20387
Security researchers have discovered two high-risk vulnerabilities (CVE-2025-20386 and CVE-2025-20387, with CVSS severity 8.0) affecting the Splunk Enterprise platform and...
Redazione RHC - 5 December 2025
Cybercrime
Apache HTTP Server Update Fixes Critical Security Vulnerabilities
The Apache Software Foundation has released a significant update for its popular Apache HTTP Server , addressing a total of...
Redazione RHC - 5 December 2025
Cybercrime
Cyber Insurance: Why Basic Hygiene Matters
Cyber insurance has become a topic of discussion on management committees. It's no longer an add-on, but rather an essential...
Redazione RHC - 5 December 2025
A 0-day exploit on FortiWeb WAF is actively exploited! And remove the Admin interfaces from the Internet
Attackers are actively exploiting a critical flaw in Fortinet’s FortiWeb web application protection (WAF) system, which could be used as a means to conduct zero-day attacks without prior detection. As...
VLC and its creator receive award for choosing freedom over millions of dollars
Whenever you come across an unknown media file or a strange link that won't open with any standard application, there's always one program that comes to the rescue: VLC ....
What is Misevolution: The Autonomous Evolution of AI Agents, and It’s Not Always Good
Shanghai, November 11, 2025 – A new study conducted by the Shanghai Artificial Intelligence Laboratory , in collaboration with Shanghai Jiao Tong University , Renmin University of China , and...
Tanks are no longer needed: new wars are fought from a laptop
Author: Roberto Villani, Tanslate: Vincenzo Marcovecchio Why will the cyberg wars, indeed the cyber-guerrillas, be more and more present and involve us more and more? The short century, the 1900s...
A 0Day bug for a WordPress plugin sold for 6000 euros in the underground
On one of Russia's most popular forums for buying and selling vulnerabilities and attack tools, the thread appeared as a standard commercial ad, but the content is anything but trivial....
Can a cyber attack reduce a country’s GDP? In the UK, it seems so!
The British economy contracted further in September, largely due to the cyber attack on car manufacturer Jaguar Land Rover (JLR) and its forced closure. A new report from the Office...
Triofox Antivirus Exploited to Install Remote Access Components
Google researchers warn that hackers are exploiting a critical vulnerability in Gladinet Triofox to remotely execute code with SYSTEM privileges, bypassing authentication and gaining complete control of the system. The...
BazarLoader: The precursor malware used by RaaS gangs
BazarLoader (sometimes referred to as BazaLoader ) is a " precursor malware " that provides initial backdoor access to an infected Windows host. Once a client is infected, criminals use...
Emotet: The horse returns to a gallop more dangerous than ever
Emotet is a malware of the Trojan Horse category, which began its first spread in 2014 which brought it to the podium among the main cyber threats of the decade...
Two 0-day attacks, one attack: the perfect strike against Citrix and Cisco. Amazon’s discovery
Amazon ha segnalato un complesso attacco informatico in cui gli aggressori hanno sfruttato simultaneamente due vulnerabilità zero-day, presenti nei prodotti Citrix e Cisco. Secondo il responsabile della sicurezza informatica dell'azienda,...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Culture
Cybercrime