A security researcher discovered multiple vulnerabilities in the Unitree G1 humanoid robot that allow remote root access without physical interaction, and demonstrated how a compromised unit could be weaponized to attack neighboring robots. By chaining two separate flaws together, the researcher established a concerning attack vector that reveals the propagation risks within networked robotic systems. The three-month investigation highlights significant security gaps in the robot's design that could have broad implications for deployments in shared or industrial environments.
Read full article at Security Affairs ↗New research reveals that AI safety refusal lives in a thin neural layer, highlighting the critical need for external, multi-layered security. The post Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety appeared first on Unit 42.
Cosmos Labs disclosed that a critical balance-handling vulnerability in its shared EVM module was actively exploited to drain funds from six blockchains over a five-day period in August 2026, despite the company's awareness that every blockchain using the module was vulnerable. The flaw, tracked as GHSA-7g4w-cg88-2cq2, was published without standard vulnerability identifiers or severity scoring, complicating threat assessment and response coordination across affected networks.
Attackers are chaining two vulnerabilities in PaperCut NG and MF to achieve unauthenticated remote code execution by compromising the application's trusted configuration. PaperCut has released an emergency patch with additional hardening measures to address the flaw. The vulnerability allows malicious actors to execute arbitrary Java code within the application without requiring authentication credentials.
PaperCut disclosed an emergency advisory regarding active exploitation of vulnerabilities in its PaperCut NG and MF print management software platforms. The flaws are currently being leveraged by threat actors in real-world attacks, prompting immediate attention from organizations using these widely deployed solutions.