Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

The Hacker News feed reports multiple major cybersecurity developments, including critical and actively exploited vulnerabilities enabling unauthenticated or root-level remote code execution in Unitree G1 EDU robots, ServiceNow AI Platform, ZBT routers, cPanel/WHM, Next.js, and Kaltura mwEmbed. It also covers an actively exploited PaperCut zero-day, CISA KEV additions, state-sponsored campaigns and malware, phishing-based Microsoft 365 session theft, supply-chain compromises, and emerging AI-agent security risks.