https://0daynews.com/articles/2026-07-12-redhook-group-ib-wireless-adb-loopback-shizuku-uid-2000/ 0dayNews en 2026-07-12T15:00:00.000Z RedHook Android RAT pairs Wireless ADB on-device RedHook, Android, Wireless ADB, Wireless Debugging, Accessibility Service, Shizuku, Group-IB https://0daynews.com/articles/2026-07-12-redhook-group-ib-wireless-adb-loopback-shizuku-uid-2000/cover.jpg RedHook Android RAT pairs Wireless ADB on-device https://0daynews.com/articles/2026-07-12-coinspect-ill-bloom-weak-prng-wallet-seed-5-1m-drained/ 0dayNews en 2026-07-12T09:15:00.000Z Ill Bloom: Weak PRNG Drained $5.1M From Crypto Wallets ill bloom, coinspect, cryptocurrency wallet, weak prng, seed phrase, wallet drain https://0daynews.com/articles/2026-07-12-coinspect-ill-bloom-weak-prng-wallet-seed-5-1m-drained/cover.jpg Ill Bloom: Weak PRNG Drained $5.1M From Crypto Wallets https://0daynews.com/articles/2026-07-11-sentinellabs-balochistan-police-china-india-converge/ 0dayNews en 2026-07-11T21:20:00.000Z China, India APTs Converge on Balochistan Police SentinelLABS, Balochistan Police, Mysterious Elephant, PlugX, ShadowPad, Pakistan, APT-C-08 https://0daynews.com/articles/2026-07-11-sentinellabs-balochistan-police-china-india-converge/cover.jpg China, India APTs Converge on Balochistan Police https://0daynews.com/articles/2026-07-11-jscrambler-npm-8-14-0-preinstall-rust-infostealer/ 0dayNews en 2026-07-11T20:15:00.000Z jscrambler 8.14.0 npm hijack: Rust stealer on install jscrambler, npm, supply-chain, preinstall, infostealer, Rust, Socket https://0daynews.com/articles/2026-07-11-jscrambler-npm-8-14-0-preinstall-rust-infostealer/cover.jpg jscrambler 8.14.0 npm hijack: Rust stealer on install https://0daynews.com/articles/2026-07-11-mvpnalyzer-281-android-vpn-study-leaks-tracking/ 0dayNews en 2026-07-11T19:00:00.000Z 281 free Android VPN apps: 29 leak, 246 track android, vpn, mvpnalyzer, ndss, mobile, dns-leak, google-play https://0daynews.com/articles/2026-07-11-mvpnalyzer-281-android-vpn-study-leaks-tracking/cover.jpg 281 free Android VPN apps: 29 leak, 246 track https://0daynews.com/articles/2026-07-11-ptc-windchill-flexplm-cve-2026-12569-kev-jsp-webshell/ 0dayNews en 2026-07-11T17:15:00.000Z PTC Windchill PLM RCE is on KEV — shells still landing PTC Windchill, FlexPLM, CVE-2026-12569, CISA KEV, deserialization, JSP webshell, PLM https://0daynews.com/articles/2026-07-11-ptc-windchill-flexplm-cve-2026-12569-kev-jsp-webshell/cover.jpg PTC Windchill PLM RCE is on KEV — shells still landing https://0daynews.com/articles/2026-07-11-acsc-cms-plugin-exploitation-advisory-18-cves/ 0dayNews en 2026-07-11T15:05:00.000Z Australia's ACSC names 18 CMS bugs under exploitation ACSC, CMS, WordPress, Craft CMS, Joomla JCE, webshells, plugin exploitation https://0daynews.com/articles/2026-07-11-acsc-cms-plugin-exploitation-advisory-18-cves/cover.jpg Australia's ACSC names 18 CMS bugs under exploitation https://0daynews.com/articles/2026-07-11-gitea-docker-cve-2026-20896-sysdig-csa-1264-regression/ 0dayNews en 2026-07-11T12:03:16.000Z Gitea Docker Auth Bypass: Patch 1.26.4, CSA Confirms Gitea, CVE-2026-20896, Docker, Sysdig, Singapore CSA, reverse-proxy, authentication-bypass https://0daynews.com/articles/2026-07-11-gitea-docker-cve-2026-20896-sysdig-csa-1264-regression/cover.jpg Gitea Docker Auth Bypass: Patch 1.26.4, CSA Confirms https://0daynews.com/articles/2026-07-11-u-boot-libfdt-fit-parsing-six-brly-flaws/ 0dayNews en 2026-07-11T11:15:00.000Z Six U-Boot flaws trace to one libfdt helper u-boot, libfdt, fit-image, bootloader, firmware, binarly, brly-2026-037 https://0daynews.com/articles/2026-07-11-u-boot-libfdt-fit-parsing-six-brly-flaws/cover.jpg Six U-Boot flaws trace to one libfdt helper https://0daynews.com/articles/2026-07-11-ghostcommit-png-prompt-injection-coderabbit-bugbot/ 0dayNews en 2026-07-11T11:00:00.000Z Ghostcommit and the reviewers that don't open the PNG Ghostcommit, prompt injection, CodeRabbit, Bugbot, AI code review, supply chain https://0daynews.com/articles/2026-07-11-ghostcommit-png-prompt-injection-coderabbit-bugbot/cover.jpg Ghostcommit and the reviewers that don't open the PNG https://0daynews.com/articles/2026-07-11-modbeacon-silver-fox-rust-rat-grpc-c2-qianxin/ 0dayNews en 2026-07-11T07:15:00.000Z Silver Fox ships MODBEACON, a Rust RAT with gRPC C2 Silver Fox, MODBEACON, QiAnXin, Rust malware, gRPC C2, SEO poisoning, counterfeit installers https://0daynews.com/articles/2026-07-11-modbeacon-silver-fox-rust-rat-grpc-c2-qianxin/cover.jpg Silver Fox ships MODBEACON, a Rust RAT with gRPC C2 https://0daynews.com/articles/2026-07-11-metasploit-weekly-flowise-csv-packagekit-modules/ 0dayNews en 2026-07-11T05:20:00.000Z Metasploit Weekly Adds Flowise CSV, macOS PackageKit Metasploit, Rapid7, Flowise, CVE-2026-41264, PackageKit, CVE-2024-27822, macOS, prompt injection https://0daynews.com/articles/2026-07-11-metasploit-weekly-flowise-csv-packagekit-modules/cover.jpg Metasploit Weekly Adds Flowise CSV, macOS PackageKit https://0daynews.com/articles/2026-07-11-cisa-kev-balbooa-icagenda-joomla-file-upload/ 0dayNews en 2026-07-11T04:20:00.000Z Balbooa, iCagenda Join KEV: Four Joomla RCEs in Four Days CISA KEV, CVE-2026-56291, CVE-2026-48939, Balbooa Forms, iCagenda, Joomla, file upload, CWE-434 https://0daynews.com/articles/2026-07-11-cisa-kev-balbooa-icagenda-joomla-file-upload/cover.jpg Balbooa, iCagenda Join KEV: Four Joomla RCEs in Four Days https://0daynews.com/articles/2026-07-10-openmandriva-beatrici-cooker-cosmic-gnome-admin-boundary/ 0dayNews en 2026-07-11T03:15:00.000Z OpenMandriva contributor deleted GNOME and Cosmic repos OpenMandriva, Davide Beatrici, Linux distribution, supply chain, maintainer trust, Cooker, GNOME https://0daynews.com/articles/2026-07-10-openmandriva-beatrici-cooker-cosmic-gnome-admin-boundary/cover.jpg OpenMandriva contributor deleted GNOME and Cosmic repos https://0daynews.com/articles/2026-07-11-zimbra-10-1-19-classic-web-client-xss-google-tag/ 0dayNews en 2026-07-11T02:15:00.000Z Zimbra ships 10.1.19; Google TAG reported the XSS Zimbra, Zimbra Collaboration Suite, Classic Web Client, stored XSS, Google TAG, Threat Analysis Group, webmail https://0daynews.com/articles/2026-07-11-zimbra-10-1-19-classic-web-client-xss-google-tag/cover.jpg Zimbra ships 10.1.19; Google TAG reported the XSS https://0daynews.com/articles/2026-07-11-npm-12-allowscripts-off-default-gats-oidc-branch/ 0dayNews en 2026-07-11T01:20:00.000Z npm 12 turns install scripts off by default npm, supply-chain, allowScripts, install-scripts, granular-access-tokens, oidc, github https://0daynews.com/articles/2026-07-11-npm-12-allowscripts-off-default-gats-oidc-branch/cover.jpg npm 12 turns install scripts off by default https://0daynews.com/articles/2026-07-10-iossifov-seized-crypto-wallet-still-had-key/ 0dayNews en 2026-07-10T23:55:00.000Z A seized crypto account that moved from a cell Rossen Iossifov, RG Coins, crypto seizure, Alexandria Online Auction Fraud Network, custody, forfeiture https://0daynews.com/articles/2026-07-10-iossifov-seized-crypto-wallet-still-had-key/cover.jpg A seized crypto account that moved from a cell https://0daynews.com/articles/2026-07-10-microsoft-mdash-msrc-humans-downstream/ 0dayNews en 2026-07-10T23:15:00.000Z Microsoft's MDASH and the humans downstream of it Microsoft, MDASH, MSRC, Patch Tuesday, AI vulnerability discovery, Windows security https://0daynews.com/articles/2026-07-10-microsoft-mdash-msrc-humans-downstream/cover.jpg Microsoft's MDASH and the humans downstream of it https://0daynews.com/articles/2026-07-10-openclaw-2026-6-6-nayak-whatsapp-host-rce-chain/ 0dayNews en 2026-07-10T22:15:00.000Z OpenClaw patched a chain that started in a chat message openclaw, ai-assistant, command-injection, sandbox-escape, whatsapp, chinmohan-nayak https://0daynews.com/articles/2026-07-10-openclaw-2026-6-6-nayak-whatsapp-host-rce-chain/cover.jpg OpenClaw patched a chain that started in a chat message https://0daynews.com/articles/2026-07-10-injective-sdk-ts-npm-oidc-thomasralee/ 0dayNews en 2026-07-10T21:15:00.000Z Injective SDK's npm compromise, and the OIDC that let it injective-labs, npm, supply-chain, sdk-ts, oidc, wallet-security https://0daynews.com/articles/2026-07-10-injective-sdk-ts-npm-oidc-thomasralee/cover.jpg Injective SDK's npm compromise, and the OIDC that let it https://0daynews.com/articles/2026-07-10-binarly-uboot-six-flaws-fit-signature-verification/ 0dayNews en 2026-07-10T20:20:00.000Z Six U-Boot bugs sit in front of the signature check U-Boot, Binarly, FIT image, firmware, signature verification, bootloader, BRLY-2026-037 https://0daynews.com/articles/2026-07-10-binarly-uboot-six-flaws-fit-signature-verification/cover.jpg Six U-Boot bugs sit in front of the signature check