Red Hot Cyber. The Cybersecurity Blog
Ultime news
Cybercrime
PentestAgent: Revolutionizing Penetration Testing with AI-Powered Tools
PentestAgent is another new open source project developed by the GH05TCREW group that aims to support penetration testing activities through...
Redazione RHC - 5 January 2026
Cybercrime
US Treasury Removes Sanctions on Intellexa Spyware Developers
The U.S. Treasury Department unexpectedly removed from its sanctions list three individuals previously accused of ties to Intellexa , the...
Redazione RHC - 5 January 2026
Cybercrime
Rue Language: Revolutionizing System Programming with AI
Veteran software developer Steve Klabnik, who helped create Rust and Ruby on Rails, has started work on a new programming...
Redazione RHC - 5 January 2026
Culture
Password Security: The Impact of Human Behavior on Password Strength
Password security and human behavior are more connected than we think. In previous episodes, we tried to shift our focus:...
Simone D'Agostino - 4 January 2026
Cybercrime
Potential Data Breach at Pickett USA Exposes Critical Energy Infrastructure
An unknown attacker claims to have hacked Pickett and Associates (Pickett USA), a Florida-based engineering firm, and is now selling...
Redazione RHC - 4 January 2026
Cybercrime
Forensic Timeliner: Advanced Digital Forensics Tool for DFIR Analysis
Forensic Timeliner is a high-performance forensic processing engine designed to support DFIR (Digital Forensics and Incident Response ) analysts in...
Redazione RHC - 4 January 2026
Petlibro Vulnerabilities Exposed: Control Your Pet’s Safety Now
A series of vulnerabilities have been discovered in the popular Petlibro pet food vending ecosystem. In the worst-case scenario, these vulnerabilities allowed an attacker to log into someone else's account,...
MongoBleed Vulnerability Exploited: Update MongoDB Now to Prevent Data Breach
The Cybersecurity and Infrastructure Security Agency (CISA) has officially raised the alarm about a critical vulnerability in MongoDB, adding the flaw to its catalog of known exploited vulnerabilities (KEVs). This...
Apple Supply Chain Hit by Cyberattack: Sensitive Data at Risk
During the first half of December, a Chinese company assembling devices for Apple was hit by an advanced cyberattack that may have exposed sensitive information related to a production line....
Browser-in-the-Browser Phishing Attack: How to Protect Yourself
This article analyzes a recent and sophisticated phishing campaign that uses the Browser-in-the-Browser (BitB) technique to steal credentials, particularly those from services like Microsoft 365. The BitB attack is notable...
Critical WebKit Vulnerability Exposes iOS Devices to Code Execution
A new report details a critical vulnerability discovered by security researcher Joseph Goydish in Apple's WebKit engine. This security flaw, if exploited in conjunction with other exploits, could allow attackers...
Xspeeder Devices Hit by AI-Discovered Zero-Day Vulnerability CVE-2025-54322
When it comes to cybersecurity, it's easy to fall into the trap of thinking that problems are always far away, that they only affect others. But the reality is that...
TurboDiffusion: AI Video Generation Accelerated Up to 200 Times
Automatic video generation using artificial intelligence took a significant leap on December 25, 2025, when Tsinghua University announced the open source release of TurboDiffusion. The framework, developed by the TSAIL...
OpenAI to Introduce ChatGPT Ads, Revolutionizing AI-Powered Marketing
OpenAI is once again discussing the possibility of introducing advertising into ChatGPT , this time in the form of so-called sponsored content. These aren't traditional banners, but content that could...
Job Scams on Social Media: How to Avoid Fake Remote Job Offers
Fraudulent job ads promising easy money and remote work continue to flood social media, particularly in the Middle East and North Africa . Under the guise of part-time jobs that...
MongoDB Vulnerability CVE-2025-14847: Critical Memory Disclosure Bug
As previously reported, a serious vulnerability has been discovered in MongoDB that allows a remote attacker, without authentication, to access uninitialized server memory. The vulnerability has been assigned the CVE-2025-14847...
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE
Featured Articles
Cybercrime
Cybercrime
Cybercrime
Cybercrime
Cybercrime