Schedule a Demo

Cyber Security

Cyber Security
Cyber Security

Hackers Can Take Full Control of Unitree G1 Humanoid Robots Over Bluetooth

hackers-can-take-full-control-of-unitree-g1-humanoid-robots-over-bluetooth

A critical attack chain could let attackers within Bluetooth range take full control of Unitree G1 humanoid robots, gaining root-level code execution on the locomotion computer that controls movement, cameras, speakers, voice features, and other peripherals. The flaws could allow a nearby attacker to obtain root-level code execution on the robot’s locomotion computer, which manages […]

Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

hackers-target-ai-infrastructure-with-rce,-prompt-injection-and-api-key-theft

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for remote code execution, credential theft, and cryptomining. AI infrastructure is now a cloud entry point. Over 90 days, attackers tailored techniques for services routing model traffic and connecting agents to tools. Campaigns paired exposed-server flaws with instructions that push agents […]

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

hackers-make-phishing-pages-change-their-code-every-time-someone-opens-them

Hackers are making some phishing pages harder to track by changing the code delivered to every visitor. An examined operation served a credential-stealing form whose appearance stayed familiar while its structure kept shifting. The attack started with a phishing message containing a web link. Opening it did not show a login page in one case; […]

Hackers Use Fake Student Resume to Secretly Install Malware on Researchers Computers

hackers-use-fake-student-resume-to-secretly-install-malware-on-researchers-computers

A fake student resume is being used to place a remote-access tool on researchers’ Windows computers. The campaign hides a Windows executable inside an archive that appears to contain a graduate-school application, then opens a genuine Word document while the infection runs quietly in the background. The lure claims to come from a recent Beijing […]

100+ Tech and Security Organizations Call for Global Cyber Defense Surge Against AI Attacks

100+-tech-and-security-organizations-call-for-global-cyber-defense-surge-against-ai-attacks

More than 100 technology, cybersecurity, and financial-services organizations have joined OpenAI in an open letter urging a global surge in cyber defense as artificial intelligence models grow more capable of attacking and protecting digital systems. Published Thursday as “A call for collective action on cyber defense,” the statement warns that AI-enabled cyberattacks will become far […]

PaperCut NG/MF Vulnerability Actively Exploited in Attack All Versions Impacted

papercut-ng/mf-vulnerability-actively-exploited-in-attack-all-versions-impacted

PaperCut has confirmed that hackers are actively exploiting an unpatched vulnerability in its widely used PaperCut NG and PaperCut MF print management software, prompting the company to rush out an emergency patch just hours after issuing its first warning. The Australian vendor said its security response team is investigating “confirmed customer incidents” and is treating […]

CISA Warns of Microsoft SQL Server RCE Vulnerability Exploited in Attacks

cisa-warns-of-microsoft-sql-server-rce-vulnerability-exploited-in-attacks

The U.S. Cybersecurity and Infrastructure Security Agency has added a Microsoft SQL Server remote code execution vulnerability, tracked as CVE-2019-1068, to its Known Exploited Vulnerabilities catalog after confirming exploitation in attacks. The flaw affects Microsoft SQL Server and can allow an attacker to execute code under the permissions of the SQL Server Database Engine service […]

AI-Powered AnonyMousKIT PhaaS Steals Apple IDs and 2FA Codes to Unlock Stolen iPhones

ai-powered-anonymouskit-phaas-steals-apple-ids-and-2fa-codes-to-unlock-stolen-iphones

AnonyMousKIT is turning stolen iPhones into an entry point for account theft. The phishing-as-a-service platform targets people already searching for a lost device, then uses convincing recovery messages to capture the Apple ID credentials needed to remove Activation Lock. The operation combines email, text messages, WhatsApp, recorded calls and AI-generated voice calls. Its messages can […]

21 Critical Ubiquiti UniFi Flaws Enable Authentication Bypass, Command Injection and Privilege Escalation

21-critical-ubiquiti-unifi-flaws-enable-authentication-bypass,-command-injection-and-privilege-escalation

Ubiquiti has patched 21 critical-severity vulnerabilities spanning nearly its entire UniFi product line, warning that attackers with only network access could chain the flaws to bypass authentication, inject commands, and seize full control of routers, cameras, access-control systems, and cloud gateways. The disclosures, tracked under a fresh batch, arrive months after Ubiquiti’s earlier Security Advisory […]

Iran-Linked Hackers Expand Attacks With New Backdoor and Reverse SSH Tunnels

iran-linked-hackers-expand-attacks-with-new-backdoor-and-reverse-ssh-tunnels

Iran-linked hackers have expanded an espionage effort with a Windows backdoor and reverse SSH tunnelling utility. The activity is tied to Tortoiseshell, also tracked as Mirage Kitten, UNC1549 and Nimbus Manticore. The campaign gives operators more ways to retain access after breaking into a network. The tunnelling tool can route traffic from an attacker-controlled server […]