Hasbro, WordPress and Unitree Flaws Fuel Global Cyber Threats

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily for CISOs, security leaders, and business decision-makers. Today’s five stories:

1. 01

   A suspected Chinese-speaking operator breached a Philippine nuclear research body and a marine engineering company linked to the Navy by exploiting unpatched ownCloud and WordPress systems. Stolen nuclear, personnel, financial, and credential data, and exposed attacker tools, highlight the risks facing government and defence-connected organisations.

2. 02

   Hasbro says a network incident exposed personal and financial information belonging to employees and former employees, including 436 Massachusetts residents. The incident reportedly followed a cyberattack that caused $11 million in recovery costs and delayed $25 million in sales, demonstrating the operational and financial consequences of a breach.

3. 03

   Five critical vulnerabilities were found in popular WordPress plugins and themes, including flaws enabling authentication bypass, privilege escalation, and remote code execution. Attackers could take over websites, reset accounts, or run malicious code, reinforcing the need for rapid patching and disciplined third-party software governance.

4. 04

   OpenAI, Anthropic, and more than 100 companies warn that organisations have only months to prepare for AI-enabled cyberattacks. At the same time, CISA reports attacks against more than 100 US water and wastewater systems, showing how AI may increase threats to critical infrastructure and public safety.

5. 05

   Researchers chained two Unitree G1 robot flaws to gain remote, unauthenticated root access, potentially enabling attacks on nearby robots over Bluetooth. Although Unitree patched one issue and paid a bounty, remaining firmware weaknesses raise serious concerns for labs, warehouses, and other connected environments.