CyberNews Over 8,300 Gitea servers remain vulnerable to code execution attacks, with nearly a third still unpatched against a critical security flaw that allows attackers to execute arbitrary shell commands with elevated privileges. This vulnerability, reported by Salesforce researcher Shai Rod and tracked as CVE-2026-60004, can be exploited even by unauthenticated visitors who register an account … Read more
As AI-powered tools accelerate vulnerability discovery, cybersecurity defenders are facing an unprecedented challenge. With thousands of new vulnerabilities being published each month, traditional methods of managing risk are struggling to keep up. The National Vulnerability Database (NVD), a critical resource for defenders, has been forced to introduce changes in response to the growing volume of … Read more
As we enter the mid-point of 2026, a growing trend is emerging in the world of cybersecurity: identity exposure. A recent analysis of over 11 real-world cases has revealed that compromised identities are often the starting point for active attack paths, allowing hackers to move laterally within an organization’s network with ease. The concept of … Read more
A pair of critical vulnerabilities in the Unitree G1 EDU humanoid robot have been uncovered, allowing hackers to gain root access and execute malicious code on the device. The flaws, which affect both the Bluetooth and wired connections of the robot, pose a significant threat to educational institutions that rely on these robots for teaching … Read more
A fresh wave of malicious Chrome and Edge extensions has surfaced, putting millions of users’ sensitive financial information at risk. A total of 19 suspicious extensions, available for download from both the Google Chrome Web Store and Microsoft Edge Add-ons, have been found to contain wallet-stealing and crypto-draining code. These extensions, which claim to offer … Read more
A devastating cPanel vulnerability has been discovered, allowing a single hosting customer to gain root access to an entire server. This critical flaw affects numerous web hosting providers worldwide, putting millions of websites and sensitive data at risk. The issue lies in a design oversight within cPanel’s permission system, which grants excessive privileges to users … Read more
A disturbing discovery has come to light, revealing a critical security flaw in certain China-made ZBT routers. These devices, used by millions of internet users worldwide, have been found to ship with not one, but two embedded implants that grant unauthenticated attackers root access. This means that anyone, regardless of their technical expertise or intentions, … Read more
A trio of critical vulnerabilities in ServiceNow, a leading IT service management platform, has left thousands of organizations vulnerable to unauthenticated attacks. The three flaws, each rated CVSS 10.0, allow attackers to execute code and manipulate SQL databases without needing credentials. This is a serious concern for companies that rely on ServiceNow to manage their … Read more
As the threat landscape continues to evolve, a critical vulnerability has come to light, exposing millions of users worldwide to identity-based attacks. The concept of “Identity Fabric” – a complex web of interconnected identities across multiple domains and systems – has become a ticking time bomb, waiting to unleash devastating consequences. At its core, Identity … Read more
A Critical Vulnerability in Unitree G1 EDU Robots Allows Root Access and Bluetooth Hijacking, Exposing Users to Serious Risks Two critical flaws have been discovered in the Unitree G1 EDU humanoid robot, a popular educational platform used by students and educators worldwide. The vulnerabilities allow for root remote code execution (RCE) and can be exploited … Read more