https://0daynews.com/articles/2026-07-20-aivd-mivd-russian-intel-ip-cameras-nato-military-transport-ukraine/ 0dayNews en 2026-07-20T14:15:00.000Z AIVD/MIVD: Russia hijacks IP cameras on NATO convoy routes AIVD, MIVD, IP cameras, Russia, Ukraine, NATO, military logistics https://0daynews.com/articles/2026-07-20-aivd-mivd-russian-intel-ip-cameras-nato-military-transport-ukraine/cover.jpg AIVD/MIVD: Russia hijacks IP cameras on NATO convoy routes https://0daynews.com/articles/2026-07-20-wsus-sync-fix-new-installs-only-old-servers-metadata-cleanup/ 0dayNews en 2026-07-20T13:15:00.000Z WSUS sync fix only for new installs, old servers still stuck WSUS, Windows Server Update Services, Microsoft, Windows Server, Configuration Manager, patch management, sync failure https://0daynews.com/articles/2026-07-20-wsus-sync-fix-new-installs-only-old-servers-metadata-cleanup/cover.jpg WSUS sync fix only for new installs, old servers still stuck https://0daynews.com/articles/2026-07-20-trend-micro-bandcampro-gemini-cli-c2-dental-clinic-eight-node-botnet/ 0dayNews en 2026-07-20T12:00:00.000Z Trend Micro: 'bandcampro' ran botnet ops through Gemini CLI Google Gemini CLI, bandcampro, Trend Micro, botnet, OpenDental, Patriot Bait, AI-assisted intrusions https://0daynews.com/articles/2026-07-20-trend-micro-bandcampro-gemini-cli-c2-dental-clinic-eight-node-botnet/cover.jpg Trend Micro: 'bandcampro' ran botnet ops through Gemini CLI https://0daynews.com/articles/2026-07-20-microsoft-kb5121767-oob-dell-intel-ipf-driver-hold-fix/ 0dayNews en 2026-07-20T11:15:00.000Z Microsoft ships KB5121767 OOB for Dell IPF driver hold Microsoft, KB5121767, Windows 11, Dell, Intel IPF, out-of-band update, KB5101650, safeguard hold https://0daynews.com/articles/2026-07-20-microsoft-kb5121767-oob-dell-intel-ipf-driver-hold-fix/cover.jpg Microsoft ships KB5121767 OOB for Dell IPF driver hold https://0daynews.com/articles/2026-07-20-servicenow-ai-platform-cve-2026-6875-defused-exploitation/ 0dayNews en 2026-07-20T10:30:00.000Z ServiceNow AI Platform RCE exploited in wild: CVE-2026-6875 ServiceNow, CVE-2026-6875, AI Platform, remote code execution, Defused, active exploitation https://0daynews.com/articles/2026-07-20-servicenow-ai-platform-cve-2026-6875-defused-exploitation/cover.jpg ServiceNow AI Platform RCE exploited in wild: CVE-2026-6875 https://0daynews.com/articles/2026-07-20-hugging-face-autonomous-ai-agent-breach-internal-datasets/ 0dayNews en 2026-07-20T09:00:00.000Z Hugging Face confirms breach by autonomous AI agent Hugging Face, autonomous AI agent, supply chain, dataset loader, template injection, GLM 5.2, AI security https://0daynews.com/articles/2026-07-20-hugging-face-autonomous-ai-agent-breach-internal-datasets/cover.jpg Hugging Face confirms breach by autonomous AI agent https://0daynews.com/articles/2026-07-20-stepsecurity-sleepergem-rubygems-dormant-accounts-forgejo-loader/ 0dayNews en 2026-07-20T08:00:00.000Z SleeperGem loader hides in dormant RubyGems, skips CI/CD SleeperGem, StepSecurity, RubyGems supply chain, git_credential_manager, Dendreo, Forgejo, dormant maintainer accounts https://0daynews.com/articles/2026-07-20-stepsecurity-sleepergem-rubygems-dormant-accounts-forgejo-loader/cover.jpg SleeperGem loader hides in dormant RubyGems, skips CI/CD https://0daynews.com/articles/2026-07-20-wp2shell-first-exploitation-cve-2026-60137-sqli-companion-patched/ 0dayNews en 2026-07-20T01:15:00.000Z wp2shell: first signs of exploitation; CVE-2026-60137 lands CVE-2026-63030, CVE-2026-60137, wp2shell, WordPress, WordPress Core, in-the-wild exploitation, watchTowr, Searchlight Cyber https://0daynews.com/articles/2026-07-20-wp2shell-first-exploitation-cve-2026-60137-sqli-companion-patched/cover.jpg wp2shell: first signs of exploitation; CVE-2026-60137 lands https://0daynews.com/articles/2026-07-19-nginx-cve-2026-42533-map-regex-heap-overflow-worker-patch/ 0dayNews en 2026-07-19T22:05:00.000Z nginx patches heap overflow in worker (CVE-2026-42533) nginx, CVE-2026-42533, F5, heap overflow, map directive, NGINX Plus, memory safety https://0daynews.com/articles/2026-07-19-nginx-cve-2026-42533-map-regex-heap-overflow-worker-patch/cover.jpg nginx patches heap overflow in worker (CVE-2026-42533) https://0daynews.com/articles/2026-07-19-cert-ua-uac-0145-sandworm-clickfix-ukraine/ 0dayNews en 2026-07-19T18:00:00.000Z CERT-UA: UAC-0145 (Sandworm) runs ClickFix on Ukraine CERT-UA, UAC-0145, Sandworm, ClickFix, Ukraine, EtherHiding, COWARDDUCK https://0daynews.com/articles/2026-07-19-cert-ua-uac-0145-sandworm-clickfix-ukraine/cover.jpg CERT-UA: UAC-0145 (Sandworm) runs ClickFix on Ukraine https://0daynews.com/articles/2026-07-19-kaspersky-hellonet-vipnet-updater-dll-sideload-russian-orgs/ 0dayNews en 2026-07-19T16:30:00.000Z Kaspersky details HelloNet abuse of ViPNet updater HelloNet, ViPNet, InfoTeCS, Kaspersky, DLL sideloading, HelloInjector, APT https://0daynews.com/articles/2026-07-19-kaspersky-hellonet-vipnet-updater-dll-sideload-russian-orgs/cover.jpg Kaspersky details HelloNet abuse of ViPNet updater https://0daynews.com/articles/2026-07-19-volexity-uta0533-sma1000-rootrun-knuckleball-orangetail/ 0dayNews en 2026-07-19T15:00:00.000Z SonicWall SMA1000: Volexity names UTA0533, IoC list out SonicWall SMA1000, UTA0533, Volexity, CVE-2026-15409, CVE-2026-15410, ROOTRUN, ORANGETAIL https://0daynews.com/articles/2026-07-19-volexity-uta0533-sma1000-rootrun-knuckleball-orangetail/cover.jpg SonicWall SMA1000: Volexity names UTA0533, IoC list out https://0daynews.com/articles/2026-07-19-legacyhive-nightmare-eclipse-windows-user-profile-usrclass-lpe-unpatched/ 0dayNews en 2026-07-19T06:15:00.000Z LegacyHive: PoC drops for unpatched Windows LPE zero-day LegacyHive, Windows zero-day, local privilege escalation, User Profile Service, usrclass.dat, Nightmare Eclipse https://0daynews.com/articles/2026-07-19-legacyhive-nightmare-eclipse-windows-user-profile-usrclass-lpe-unpatched/cover.jpg LegacyHive: PoC drops for unpatched Windows LPE zero-day https://0daynews.com/articles/2026-07-19-metasploit-weekly-http-smb-relay-riscv-fetch-payloads/ 0dayNews en 2026-07-19T03:20:00.000Z Metasploit adds HTTP-to-SMB NTLM relay, RISC-V payloads Metasploit, Rapid7, NTLM relay, SMB signing, RISC-V, fetch payloads https://0daynews.com/articles/2026-07-19-metasploit-weekly-http-smb-relay-riscv-fetch-payloads/cover.jpg Metasploit adds HTTP-to-SMB NTLM relay, RISC-V payloads https://0daynews.com/articles/2026-07-18-microsoft-acr-stealer-april-june-webdav-etherhiding/ 0dayNews en 2026-07-18T22:20:00.000Z Microsoft ties ACR Stealer surge to WebDAV, blockchain C2 ACR Stealer, Amatera, ClickFix, WebDAV, EtherHiding, Microsoft Threat Intelligence, DPAPI https://0daynews.com/articles/2026-07-18-microsoft-acr-stealer-april-june-webdav-etherhiding/cover.jpg Microsoft ties ACR Stealer surge to WebDAV, blockchain C2 https://0daynews.com/articles/2026-07-18-7-zip-26-02-xz-heap-overflow-rce-zdi-26-444/ 0dayNews en 2026-07-18T21:00:00.000Z 7-Zip 26.02 patches XZ heap overflow, no auto-update 7-Zip, ZDI-26-444, XZ, heap overflow, remote code execution, patch, Windows https://0daynews.com/articles/2026-07-18-7-zip-26-02-xz-heap-overflow-rce-zdi-26-444/cover.jpg 7-Zip 26.02 patches XZ heap overflow, no auto-update https://0daynews.com/articles/2026-07-18-doj-chen-zhang-queens-brooklyn-43m-investment-fraud-laundering-140-accounts-45-shells/ 0dayNews en 2026-07-18T18:15:00.000Z Two indicted over $43M laundered from investment scams money laundering, investment fraud, pig butchering, DOJ indictment, shell companies, HSI https://0daynews.com/articles/2026-07-18-doj-chen-zhang-queens-brooklyn-43m-investment-fraud-laundering-140-accounts-45-shells/cover.jpg Two indicted over $43M laundered from investment scams https://0daynews.com/articles/2026-07-18-nadmesh-go-botnet-shodan-comfyui-ollama-3811-aws-keys/ 0dayNews en 2026-07-18T16:15:00.000Z NadMesh botnet raids exposed AI tools for 3,811 AWS keys nadmesh, ollama, comfyui, langflow, n8n, open-webui, gradio, aws-keys, kubernetes, shodan, cloud-security https://0daynews.com/articles/2026-07-18-nadmesh-go-botnet-shodan-comfyui-ollama-3811-aws-keys/cover.jpg NadMesh botnet raids exposed AI tools for 3,811 AWS keys https://0daynews.com/articles/2026-07-18-expel-digicert-goldeneyedog-cylindricalcanine-27-ev-code-signing-certs-zhong-stealer/ 0dayNews en 2026-07-18T15:00:00.000Z Expel: GoldenEyeDog stole 27 EV certs from DigiCert digicert, goldeneyedog, cylindricalcanine, ev-code-signing, zhong-stealer, expel, supply-chain https://0daynews.com/articles/2026-07-18-expel-digicert-goldeneyedog-cylindricalcanine-27-ev-code-signing-certs-zhong-stealer/cover.jpg Expel: GoldenEyeDog stole 27 EV certs from DigiCert