Two RCE Flaws Found in Unitree G1 EDU Humanoid Robot
Two root RCE vulnerabilities in the Unitree G1 EDU robot allow network-adjacent and BLE-based code execution. No confirmed fixed firmware version exists.
VPN & PrivacyThreat Intelligence Feed
-
-
Android Car Head Units Hit by Supply-Chain Proxy Botnet Attack
A supply-chain attack on Android car head units uses a legitimate update app to spread malware that builds a proxy botnet or commits ad fraud.
VPN & Privacy -
Hardware Makers Integrate Post-Quantum Cryptography Into Chips
Intel, Nvidia, and IBM are embedding post-quantum cryptography into hardware. Enterprises are urged to act now against harvest-now, decrypt-later attacks.
Threats -
ToxicPanda 2.0 and GoldDigger Expand Android Banking Malware Campaigns
ToxicPanda 2.0 adds 167 remote commands and targets 349 financial institutions. GoldDigger expands to South Africa and the U.K. via fake airline and retail apps
Guides -
Comcast Xfinity Shield Uses WiFi Signals as Home Motion Detectors
Comcast's new Xfinity Shield platform uses existing WiFi signals to detect motion inside homes. Privacy questions remain over data retention and third-party dis
VPN & Privacy -
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges for Self-Managed Users
A critical GitLab flaw rated CVSS 9.4 requires no authentication to exploit. Self-managed users should patch immediately or restrict GraphQL access.
Guides
Analysis & Guides
Guides
LLMs and Contextual Integrity: Two Research Papers
Two new papers examine how LLMs fail to control sensitive information flow based on context, and how reasoning and reinforcement learning may help.
Tools
Ransom Busters Affiliate Charges Victims to Delete Stolen Ransomware Data
A ransomware affiliate called Ransom Busters is charging victims $20,000–$60,000 to delete their stolen data, while posing as a helpful third party.
Guides
AmnesiaStealer macOS Malware Hijacks Browser Sessions via Remote Control
AmnesiaStealer is a new macOS infostealer distributed via ClickFix attacks. It clones browser profiles and gives attackers live, interactive control of authenti
Threats
Bruce Schneier Upcoming Speaking Engagements: Fall 2026
Bruce Schneier has several public speaking engagements scheduled for fall 2026, spanning security conferences, festivals, and civic events across North America.
Tools
DecryptAds Reveals Who Is Tracking You Across Websites and Apps
A free service called DecryptAds scrapes public adtech files to show which companies track users across websites and apps, flagging high-risk ad partners.
Threats
Searching for the Colossal Squid with Red Light Technology
A compelling video explores deep-sea search techniques, showing how red light and bait reveal more about giant and colossal squid than traditional methods.
Threats
Black Hat 2026: AI-Driven Vulnerability Discovery and What Comes Next
AI models are discovering software vulnerabilities at unprecedented scale. Could this surge eventually lead to safer, near-flaw-free software?
Guides
Delta Investigates Wi-Fi Deauth Attack on DEF CON Flight
Delta Air Lines is investigating an unauthorized Wi-Fi network and deauthentication attack on a Las Vegas-to-Atlanta flight carrying DEF CON attendees.
VPN & Privacy
Zoom Annotation Flaws Enabled Zero-Click RCE for All Meeting Participants
Three vulnerabilities in Zoom's annotation tool allowed remote code execution with no user interaction. Patches shipped in June and July 2026.