Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
Microsoft Blocks KMS38 Activation Method for Windows 10 and 11
Users noticed that last week Microsoft developers disabled the offline activation method for Windows 11 and 10 via KMS38, which...
Redazione RHC - 23 November 2025
Cybercrime
Future prospects for computer science and technology graduates
Artificial intelligence is changing the way recent computer science graduates approach the world of work. It's not about sudden job...
Redazione RHC - 23 November 2025
Cybercrime
ATMs targeted! Cybersecurity experts reveal an attack campaign targeting ATMs.
Group-IB experts presented a detailed analysis of the long-running UNC2891 campaign, which demonstrated the continuing sophistication of ATM attack schemes....
Redazione RHC - 23 November 2025
Cybercrime
Google Gemini Improves AI-Generated Image Verification
Google has expanded the capabilities of its Gemini artificial intelligence service by adding a tool to the app and web...
Redazione RHC - 23 November 2025
Cybercrime
“We Want to Hack You Again!” NSO Group Rejects WhatsApp’s Pegasus Lawsuit
Israeli company NSO Group has appealed a California federal court ruling that bars it from using WhatsApp's infrastructure to distribute...
Redazione RHC - 22 November 2025
Cybercrime
Oracle under attack: Pre-auth RCE vulnerability discovered that compromises entire systems
A vulnerability, designated CVE-2025-61757, was made public by Searchlight Cyber last Thursday. Company researchers discovered the issue and notified Oracle,...
Redazione RHC - 22 November 2025
Microsoft Exchange Server Penetration Testing: Techniques, Tools, and Countermeasures
Often, during penetration testing, we find ourselves with elevated access (Domain Admin) within an organization. Some companies stop there, thinking that obtaining Domain Admin is the ultimate goal. But it's...
Notepad++ under attack! How a fake DLL opens the door to criminal hackers
A new vulnerability affecting Notepad++ was released in September. The vulnerability has been identified as CVE-2025-56383, and details can be found on the NIST website. CVE-2025-56383 is a DLL hijacking...
Microsoft warns: Security updates cause problems with BitLocker
Microsoft has issued an urgent warning to Windows operating system users regarding a potential issue that, starting with security updates distributed on October 14, 2025, could cause some devices to...
A dangerous zero-day zero-click exploit threatens billions of Android devices
Google has issued an urgent advisory regarding a critical vulnerability in Android that allows attackers to execute arbitrary code on the device without any user interaction. The Zero Click vulnerability...
Is the era of paywalls over? Smart browsers circumvent them, and controlling them is very difficult
How can publishers protect themselves from AI-powered "smart" browsers if they look like ordinary users? The emergence of new AI-powered "smart" browsers is challenging traditional methods of protecting online content....
Danger for OneDrive users: Infected DLLs hide in shared files
Attackers are using an advanced technique involving sideloading DLLs via the Microsoft OneDrive application. This allows them to execute malicious code undetected by security mechanisms. The attack uses a modified...
ArXiv blocks articles generated by AI
arXiv, one of the most important repositories of scientific preprints , has revealed some disturbing facts following growing concerns in the scientific community regarding the uncontrolled use of generative artificial...
CISA Warns! New Bugs in Gladinet, Control Web Panel, and WordPress Expose Systems
Two vulnerabilities related to Gladinet and Control Web Panel (CWP) have been added to the U.S. Cybersecurity and Infrastructure Security Agency (CISA) catalog of known exploited vulnerabilities (KEVs), due to...
New bugs in Teams open the door to data theft and social engineering
Cybersecurity experts have disclosed four vulnerabilities in Microsoft Teams that could have allowed attackers to conduct dangerous social engineering and impersonation attacks against users. Simply put, these loopholes allow you...
OpenAI releases Sora Mobile App on Android, available in multiple countries
OpenAI has released the Sora mobile app on Android devices. CNBC reported that OpenAI's Sora app is now available for download through the Google Play app store and that the...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Culture
Cybercrime
Cybercrime
Cybercrime
Cybercrime