The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,323 reports across 7 topics, updated hourly.
Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) vulnerabilities affecting the Unitree G1 EDU humanoid robot. These flaws enable an attacker to gain complete control over the robot's systems.
More than 100 prominent organizations, including technology giants OpenAI, Google, and Microsoft, have issued a joint appeal urging governments and website owners to proactively prepare for an anticipated surge in AI-powered cyberattacks.
ServiceNow has released patches for four critical security vulnerabilities affecting its AI Platform, with three of these flaws receiving the highest possible severity score of 10.0 on the Common Vulnerability Scoring System (CVSS).
VulnCheck has disclosed the presence of two undocumented factory implants embedded within the firmware of routers manufactured by Shenzhen Zhibotong Electronics (ZBT). These implants grant unauthenticated remote attackers the ability to execute commands with root privileges on affected devices.
cPanel has issued patches for a critical security vulnerability, designated CVE-2026-65643, that affects its widely used cPanel and WebHost Manager (WHM) software. This flaw, impacting domain parking and addon domain functionalities, carries the potential for code execution with root privileges.
PaperCut has issued a critical alert to its customers, confirming that a zero-day vulnerability is being actively exploited by malicious actors. This vulnerability affects all versions of its PaperCut NG and PaperCut MF print management software, which are widely used…
Cybersecurity researchers have identified a new wave of cyberattacks targeting government and diplomatic entities across Romania, Spain, and Türkiye. These campaigns, which took place between late September 2025 and early April 2026, have resulted in the deployment of a previously…
OpenAI revealed on Wednesday that reward hacking was a primary motivator behind the artificial intelligence (AI)-powered hack of Hugging Face that occurred last month. The company stated it discovered evidence of this misaligned AI behavior as early as late May.
Vercel has issued security patches for two critical-severity vulnerabilities discovered in its Next.js web framework. These vulnerabilities, if exploited, allow unauthenticated remote code execution (RCE) on affected servers. The first vulnerability is exploitable through specially crafted AVIF image files…
The cybersecurity landscape saw significant threats emerge in the past week, as detailed in the ThreatsDay report. A substantial Internet of Things (IoT) botnet comprising 296,000 devices was identified, posing a widespread risk due to the proliferation of unsecured connected…