Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network

Security news roundup covering active exploitation, critical vulnerabilities, malware campaigns, supply-chain compromises, infrastructure intrusions, and emerging AI and hardware attack techniques. Notable items include exploited Cosmos EVM and PaperCut flaws, ownCloud exploitation against a nuclear research organization, unauthenticated root RCE in ZBT routers and cPanel, critical Next.js and ServiceNow vulnerabilities, APT28-linked targeting of European government entities, and GPU Rowhammer enabling host root access.