https://0daynews.com/articles/2026-07-24-snapchat-hacker-illinois-76-months/ 0dayNews en 2026-07-24T23:00:00.000Z 76 Months for Hacking 750 Women's Snapchat Accounts Snapchat, account compromise, credential theft, sentencing, enforcement, intimate images, cybercrime https://0daynews.com/articles/2026-07-24-snapchat-hacker-illinois-76-months/cover.jpg 76 Months for Hacking 750 Women's Snapchat Accounts https://0daynews.com/articles/2026-07-24-chick-fil-a-credential-stuffing-13000-accounts/ 0dayNews en 2026-07-24T22:00:00.000Z Chick-fil-A Breach: Credential Stuffing Hits 13,000 Accounts credential stuffing, data breach, Chick-fil-A, account takeover, customer data, PII https://0daynews.com/articles/2026-07-24-chick-fil-a-credential-stuffing-13000-accounts/cover.jpg Chick-fil-A Breach: Credential Stuffing Hits 13,000 Accounts https://0daynews.com/articles/2026-07-24-ontrac-network-breach-customer-pii-notification/ 0dayNews en 2026-07-24T21:00:00.000Z OnTrac Confirms Network Breach, Notifies Customers ontrac, data-breach, network-hack, customer-data, pii, phishing https://0daynews.com/articles/2026-07-24-ontrac-network-breach-customer-pii-notification/cover.jpg OnTrac Confirms Network Breach, Notifies Customers https://0daynews.com/articles/2026-07-24-europol-the-com-operation-compass-4340-urls/ 0dayNews en 2026-07-24T20:30:00.000Z Europol Flags 4,340 URLs in The Com Network Crackdown The Com, Europol, Operation Compass, Cyber Com, ransomware, social engineering, law enforcement https://0daynews.com/articles/2026-07-24-europol-the-com-operation-compass-4340-urls/cover.jpg Europol Flags 4,340 URLs in The Com Network Crackdown https://0daynews.com/articles/2026-07-24-hotel-wifi-dns-hijack-microsoft-365/ 0dayNews en 2026-07-24T19:00:00.000Z Hotel Wi-Fi DNS Hijacked to Steal Microsoft 365 Accounts APT28, DNS hijacking, hotel Wi-Fi, Microsoft 365, device-code authentication, phishing, threat intel https://0daynews.com/articles/2026-07-24-hotel-wifi-dns-hijack-microsoft-365/cover.jpg Hotel Wi-Fi DNS Hijacked to Steal Microsoft 365 Accounts https://0daynews.com/articles/2026-07-24-slopsquatting-hallusquatting-ai-hallucination-supply-chain/ 0dayNews en 2026-07-24T18:05:00.000Z Slopsquatting and HalluSquatting Are the Same Problem slopsquatting, hallusquatting, AI coding agents, supply chain, package hallucination, dependency management, LLM security https://0daynews.com/articles/2026-07-24-slopsquatting-hallusquatting-ai-hallucination-supply-chain/cover.jpg Slopsquatting and HalluSquatting Are the Same Problem https://0daynews.com/articles/2026-07-24-bluenoroff-zoom-teams-crypto-wallet-phishing/ 0dayNews en 2026-07-24T17:00:00.000Z BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets BlueNoroff, Lazarus Group, phishing kit, crypto theft, ClickFix, North Korea APT, social engineering https://0daynews.com/articles/2026-07-24-bluenoroff-zoom-teams-crypto-wallet-phishing/cover.jpg BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets https://0daynews.com/articles/2026-07-24-openai-chatgpt-agentforger-phishing-workspace-agents/ 0dayNews en 2026-07-24T15:00:00.000Z OpenAI Fixes Bug That Let Phishing Forge Workspace AI Agents ChatGPT, OpenAI, AI agents, phishing, enterprise security, AgentForger, workspace security https://0daynews.com/articles/2026-07-24-openai-chatgpt-agentforger-phishing-workspace-agents/cover.jpg OpenAI Fixes Bug That Let Phishing Forge Workspace AI Agents https://0daynews.com/articles/2026-07-24-certighost-ad-dc-certificate-dcsync/ 0dayNews en 2026-07-24T14:20:00.000Z Certighost: Low-Priv AD Users Can Impersonate DCs certighost, active directory, domain controller, dcsync, krbtgt, privilege escalation, active directory certificate services https://0daynews.com/articles/2026-07-24-certighost-ad-dc-certificate-dcsync/cover.jpg Certighost: Low-Priv AD Users Can Impersonate DCs https://0daynews.com/articles/2026-07-24-bing-svg-cve-2026-32194-system-rce-xbow/ 0dayNews en 2026-07-24T14:00:00.000Z Bing SVG Flaw Ran Code as SYSTEM on Microsoft Servers Bing Images, SVG injection, CVE-2026-32194, Microsoft, XBOW, server-side processing, image processing, SYSTEM privilege https://0daynews.com/articles/2026-07-24-bing-svg-cve-2026-32194-system-rce-xbow/cover.jpg Bing SVG Flaw Ran Code as SYSTEM on Microsoft Servers https://0daynews.com/articles/2026-07-24-golden-chickens-four-new-malware-families/ 0dayNews en 2026-07-24T13:00:00.000Z Golden Chickens Resurfaces: Four New Families, Same MaaS golden-chickens, venom-spider, MaaS, TinyEgg, ChonkyChicken, malware, threat-intel https://0daynews.com/articles/2026-07-24-golden-chickens-four-new-malware-families/cover.jpg Golden Chickens Resurfaces: Four New Families, Same MaaS https://0daynews.com/articles/2026-07-24-hermes-ai-agent-thai-finance-ministry/ 0dayNews en 2026-07-24T12:00:00.000Z AI Agent Ran Unattended in Thailand's Finance Ministry Hermes AI agent, post-exploitation, autonomous agent, Thailand Finance Ministry, agentic security, threat intel https://0daynews.com/articles/2026-07-24-hermes-ai-agent-thai-finance-ministry/cover.jpg AI Agent Ran Unattended in Thailand's Finance Ministry https://0daynews.com/articles/2026-07-24-nodebb-eight-ai-found-flaws-admin-access/ 0dayNews en 2026-07-24T11:30:00.000Z NodeBB Patches Eight AI-Found High-Severity Flaws NodeBB, Aikido Security, AI pentesting, forum software, patch, high severity, admin access https://0daynews.com/articles/2026-07-24-nodebb-eight-ai-found-flaws-admin-access/cover.jpg NodeBB Patches Eight AI-Found High-Severity Flaws https://0daynews.com/articles/2026-07-24-kimi-k3-redis-zero-days-rce-patches/ 0dayNews en 2026-07-24T10:00:00.000Z AI Agents Uncover Redis Zero-Days, Seven Patches Ship Redis, zero-day, RCE, AI security research, memory safety, open source, patch https://0daynews.com/articles/2026-07-24-kimi-k3-redis-zero-days-rce-patches/cover.jpg AI Agents Uncover Redis Zero-Days, Seven Patches Ship https://0daynews.com/articles/2026-07-24-clop-windchill-flexplm-cve-2026-12569-data-theft/ 0dayNews en 2026-07-24T09:00:00.000Z Clop Data Theft Campaign Hits PTC Windchill, FlexPLM Clop, PTC Windchill, FlexPLM, CVE-2026-12569, ransomware, data theft, extortion https://0daynews.com/articles/2026-07-24-clop-windchill-flexplm-cve-2026-12569-data-theft/cover.jpg Clop Data Theft Campaign Hits PTC Windchill, FlexPLM https://0daynews.com/articles/2026-07-24-uac-0099-matchboil-v2-notepad-plugin-fuse/ 0dayNews en 2026-07-24T08:00:00.000Z Russia-Linked UAC-0099 Behind Notepad++ Malware Push UAC-0099, MATCHBOIL.V2, Notepad++, CERT-UA, Russia APT, malware https://0daynews.com/articles/2026-07-24-uac-0099-matchboil-v2-notepad-plugin-fuse/cover.jpg Russia-Linked UAC-0099 Behind Notepad++ Malware Push https://0daynews.com/articles/2026-07-24-microsoft-365-outage-teams-sharepoint-admin-center/ 0dayNews en 2026-07-24T07:00:00.000Z M365 Outage Drops Teams, SharePoint, Admin Center Microsoft 365, outage, Teams, SharePoint, M365 Admin Center, security operations, service disruption https://0daynews.com/articles/2026-07-24-microsoft-365-outage-teams-sharepoint-admin-center/cover.jpg M365 Outage Drops Teams, SharePoint, Admin Center https://0daynews.com/articles/2026-07-23-synthetic-identity-fraud-machine-credentials/ 0dayNews en 2026-07-24T01:05:00.000Z Synthetic Identity Fraud Comes for Machine Credentials synthetic-identity, machine-identity, API-keys, service-accounts, identity-fraud, IAM, cloud-security https://0daynews.com/articles/2026-07-23-synthetic-identity-fraud-machine-credentials/cover.jpg Synthetic Identity Fraud Comes for Machine Credentials https://0daynews.com/articles/2026-07-23-ai-both-weapon-and-attack-surface/ 0dayNews en 2026-07-23T23:58:00.000Z AI Is Now Both Attack Tool and Attack Surface AI security, threat intelligence, Dolphin X RAT, SectopRAT, sandbox escape, AI agent, malware https://0daynews.com/articles/2026-07-23-ai-both-weapon-and-attack-surface/cover.jpg AI Is Now Both Attack Tool and Attack Surface https://0daynews.com/articles/2026-07-23-confluence-cve-2023-22515-three-years-kilobaud/ 0dayNews en 2026-07-23T23:00:00.000Z CVE-2023-22515: Three Years of Confluence Exploitation Atlassian, Confluence, CVE-2023-22515, broken access control, EPSS, KEV, patch management, ransomware precursor https://0daynews.com/articles/2026-07-23-confluence-cve-2023-22515-three-years-kilobaud/cover.jpg CVE-2023-22515: Three Years of Confluence Exploitation https://0daynews.com/articles/2026-07-23-dolphin-x-rat-ai-victim-profiling/ 0dayNews en 2026-07-23T22:00:00.000Z Dolphin X RAT Uses AI to Score High-Value Targets dolphin-x, RAT, remote-access-trojan, AI-profiling, malware, threat-intel, victim-targeting https://0daynews.com/articles/2026-07-23-dolphin-x-rat-ai-victim-profiling/cover.jpg Dolphin X RAT Uses AI to Score High-Value Targets https://0daynews.com/articles/2026-07-23-fake-claude-sectoprat-bing-malvertising-loop/ 0dayNews en 2026-07-23T22:00:00.000Z Fake Claude Installer in Bing Ads Drops SectopRAT malvertising, SectopRAT, ArechClient2, Bing ads, Claude, RAT, infostealer https://0daynews.com/articles/2026-07-23-fake-claude-sectoprat-bing-malvertising-loop/cover.jpg Fake Claude Installer in Bing Ads Drops SectopRAT https://0daynews.com/articles/2026-07-23-openai-huggingface-eval-production-kilobaud/ 0dayNews en 2026-07-23T22:00:00.000Z OpenAI Eval Reached HuggingFace Production AI security, agentic AI, OpenAI, HuggingFace, model evaluation, AI containment, frontier AI https://0daynews.com/articles/2026-07-23-openai-huggingface-eval-production-kilobaud/cover.jpg OpenAI Eval Reached HuggingFace Production https://0daynews.com/articles/2026-07-23-origin-energy-data-breach-pii-exposed/ 0dayNews en 2026-07-23T21:00:00.000Z Origin Energy Confirms Customer Data Breach Origin Energy, data breach, PII, Australia, energy sector, customer data https://0daynews.com/articles/2026-07-23-origin-energy-data-breach-pii-exposed/cover.jpg Origin Energy Confirms Customer Data Breach https://0daynews.com/articles/2026-07-23-talos-q2-2026-dont-swing-patch-prioritization/ 0dayNews en 2026-07-23T20:00:00.000Z Q2 2026 Vuln Stats: You Can't Patch Everything patch-management, vulnerability-prioritization, EPSS, KEV, Talos, CVE-statistics, threat-intelligence https://0daynews.com/articles/2026-07-23-talos-q2-2026-dont-swing-patch-prioritization/cover.jpg Q2 2026 Vuln Stats: You Can't Patch Everything https://0daynews.com/articles/2026-07-23-lunchpoke-certua-notepad-plugin-persistence-fuse/ 0dayNews en 2026-07-23T19:00:00.000Z CERT-UA: LunchPoke Malware Hides in Notepad++ Plugin Notepad++, LunchPoke, CERT-UA, malware, persistence, plugin, Ukraine https://0daynews.com/articles/2026-07-23-lunchpoke-certua-notepad-plugin-persistence-fuse/cover.jpg CERT-UA: LunchPoke Malware Hides in Notepad++ Plugin https://0daynews.com/articles/2026-07-23-void-blizzard-zimbra-zero-click-email-theft-airgap/ 0dayNews en 2026-07-23T18:00:00.000Z Void Blizzard Exploits Zimbra Flaw for Email Theft Void Blizzard, Laundry Bear, Zimbra, email theft, CISA, state-sponsored, Russia https://0daynews.com/articles/2026-07-23-void-blizzard-zimbra-zero-click-email-theft-airgap/cover.jpg Void Blizzard Exploits Zimbra Flaw for Email Theft https://0daynews.com/articles/2026-07-23-jadeprox-triback-loader-group-ib-china-nexus-apt/ 0dayNews en 2026-07-23T17:00:00.000Z China-Linked JadeProx Deploys TriBack Loader in Gov Attacks JadeProx, TriBack Loader, China APT, Group-IB, government, healthcare, threat intelligence, Windows loader https://0daynews.com/articles/2026-07-23-jadeprox-triback-loader-group-ib-china-nexus-apt/cover.jpg China-Linked JadeProx Deploys TriBack Loader in Gov Attacks https://0daynews.com/articles/2026-07-23-claude-cowork-vm-escape-mac-files-airgap/ 0dayNews en 2026-07-23T16:00:00.000Z Claude Cowork VM Escape Reaches Mac Files Claude Cowork, VM escape, sandbox escape, Anthropic, Accomplish AI, macOS, AI agent security https://0daynews.com/articles/2026-07-23-claude-cowork-vm-escape-mac-files-airgap/cover.jpg Claude Cowork VM Escape Reaches Mac Files https://0daynews.com/articles/2026-07-23-fedramp-20x-rev5-transition-continuous-monitoring-loop/ 0dayNews en 2026-07-23T15:00:00.000Z FedRAMP 20x Ends Point-in-Time Authorization FedRAMP, FedRAMP 20x, cloud compliance, continuous monitoring, OSCAL, ATO, federal cloud https://0daynews.com/articles/2026-07-23-fedramp-20x-rev5-transition-continuous-monitoring-loop/cover.jpg FedRAMP 20x Ends Point-in-Time Authorization https://0daynews.com/articles/2026-07-23-github-actions-packagist-cpanel-whm-supply-chain/ 0dayNews en 2026-07-23T13:00:00.000Z Attackers Weaponize GitHub Actions Against cPanel Hosts supply chain, GitHub Actions, Packagist, cPanel, WHM, CI/CD abuse, malicious packages https://0daynews.com/articles/2026-07-23-github-actions-packagist-cpanel-whm-supply-chain/cover.jpg Attackers Weaponize GitHub Actions Against cPanel Hosts https://0daynews.com/articles/2026-07-23-refluxfs-cve-2026-64600-linux-kernel-lpe-rhel/ 0dayNews en 2026-07-23T12:00:00.000Z RefluXFS LPE Hits Default RHEL, Fedora, Amazon Linux CVE-2026-64600, Linux kernel, XFS, privilege escalation, LPE, RHEL, Qualys https://0daynews.com/articles/2026-07-23-refluxfs-cve-2026-64600-linux-kernel-lpe-rhel/cover.jpg RefluXFS LPE Hits Default RHEL, Fedora, Amazon Linux https://0daynews.com/articles/2026-07-23-chaos-ransomware-msarat-browser-c2-webrtc-airgap/ 0dayNews en 2026-07-23T11:00:00.000Z Chaos Ransomware's msaRAT Hides C2 in Browser Traffic ransomware, msaRAT, Chaos ransomware, browser C2, WebRTC, TURN relay, command-and-control https://0daynews.com/articles/2026-07-23-chaos-ransomware-msarat-browser-c2-webrtc-airgap/cover.jpg Chaos Ransomware's msaRAT Hides C2 in Browser Traffic https://0daynews.com/articles/2026-07-23-exchange-online-mailbox-quarantine-error-airgap/ 0dayNews en 2026-07-23T10:00:00.000Z Exchange Online Quarantining Mailboxes in Error Since Sunday Exchange Online, Microsoft, mailbox quarantine, Microsoft 365, email security, false positive https://0daynews.com/articles/2026-07-23-exchange-online-mailbox-quarantine-error-airgap/cover.jpg Exchange Online Quarantining Mailboxes in Error Since Sunday https://0daynews.com/articles/2026-07-23-moveit-cve-2023-34362-three-years-clop-data-breach/ 0dayNews en 2026-07-23T08:00:00.000Z MOVEit Transfer and the Breach That Defined 2023 CVE-2023-34362, MOVEit Transfer, Cl0p, SQL injection, data breach, managed file transfer, EPSS https://0daynews.com/articles/2026-07-23-moveit-cve-2023-34362-three-years-clop-data-breach/cover.jpg MOVEit Transfer and the Breach That Defined 2023 https://0daynews.com/articles/2026-07-23-eclypsium-infratrust-pulse-firmware-patch-priority/ 0dayNews en 2026-07-23T07:00:00.000Z Eclypsium Launches InfraTrust for Firmware Patch Priority firmware security, infrastructure vulnerabilities, patch prioritization, Eclypsium, InfraTrust, edge devices, networking https://0daynews.com/articles/2026-07-23-eclypsium-infratrust-pulse-firmware-patch-priority/cover.jpg Eclypsium Launches InfraTrust for Firmware Patch Priority https://0daynews.com/articles/2026-07-23-kratos-phishing-kit-dismantled-microsoft-365-mfa-bypass-fuse/ 0dayNews en 2026-07-23T05:00:00.000Z Kratos Phishing Kit Dismantled in Global Takedown phishing, MFA bypass, Microsoft 365, AiTM, Kratos, law enforcement, session hijacking https://0daynews.com/articles/2026-07-23-kratos-phishing-kit-dismantled-microsoft-365-mfa-bypass-fuse/cover.jpg Kratos Phishing Kit Dismantled in Global Takedown https://0daynews.com/articles/2026-07-22-n-day-n-hour-patch-window-sharepoint-wp2shell/ 0dayNews en 2026-07-23T02:00:00.000Z N-Day Is Now N-Hour: The Vanishing Patch Window n-day exploitation, patch management, CVE, exploit window, SharePoint, wp2shell, vulnerability response https://0daynews.com/articles/2026-07-22-n-day-n-hour-patch-window-sharepoint-wp2shell/cover.jpg N-Day Is Now N-Hour: The Vanishing Patch Window