Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth Swati KhandelwalAug 28, 2026Vulnerability / IoT Security Security…
Tag: phishing
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access Swati KhandelwalAug 28, 2026Vulnerability / Network Security VulnCheck has disclosed…
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server Swati KhandelwalAug 28, 2026Vulnerability / Web Security…
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations Ravie LakshmananAug 28, 2026Malware / Cyber Espionage Cybersecurity researchers have flagged a fresh…
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions Ravie LakshmananAug 28, 2026Vulnerability / Enterprise Security PaperCut has alerted customers…
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories Ravie LakshmananAug 27, 2026Hacking News / Cybersecurity…
Spark RAT Campaign Targets Cambodia Using Vulnerable OPSWAT Driver to Disable Security Tools
Cybersecurity researchers at Acronis Threat Research Unit (TRU) have uncovered a new campaign targeting individuals and organizations in Cambodia with an open-source…
GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address
Arctic Wolf has disclosed a previously undocumented Go-based malware framework, GoCaracal, used in a June 2026 intrusion at an unnamed communications organization…
Cloaked.gg: Cloaking Service for Phishing
Cloaked.gg is a cloaking service used by the Blacksite phishing kit to hide phishing pages from automated URL analysis and serve benign…
NovaCookies Phishing Kit Abuses Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Cybersecurity researchers have disclosed a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies, which is used as a proxy to redirect Microsoft 365…