https://0daynews.com/articles/2026-07-28-linux-kernel-tc-cve-2026-53264-lpe/ 0dayNews en 2026-07-28T11:00:00.000Z Linux Kernel tc Race Yields Root Exploit (CVSS 7.8) CVE-2026-53264, linux-kernel, privilege-escalation, use-after-free, race-condition, traffic-control, STAR-Labs https://0daynews.com/articles/2026-07-28-linux-kernel-tc-cve-2026-53264-lpe/cover.jpg Linux Kernel tc Race Yields Root Exploit (CVSS 7.8) https://0daynews.com/articles/2026-07-28-mcbs-medical-billing-breach-1-26m/ 0dayNews en 2026-07-28T10:30:00.000Z MCBS Medical Billing Breach Exposes 1.26M Records data breach, healthcare, MCBS, medical billing, PII, HIPAA https://0daynews.com/articles/2026-07-28-mcbs-medical-billing-breach-1-26m/cover.jpg MCBS Medical Billing Breach Exposes 1.26M Records https://0daynews.com/articles/2026-07-28-teamcity-cve-2026-63077-rce-all-onprem/ 0dayNews en 2026-07-28T10:00:00.000Z TeamCity 9.8 RCE Flaw Hits All On-Prem Versions teamcity, jetbrains, CVE-2026-63077, RCE, critical, on-premises, patch https://0daynews.com/articles/2026-07-28-teamcity-cve-2026-63077-rce-all-onprem/cover.jpg TeamCity 9.8 RCE Flaw Hits All On-Prem Versions https://0daynews.com/articles/2026-07-28-microsoft-mai-cyber-1-flash-mdash-security-ai/ 0dayNews en 2026-07-28T07:00:00.000Z Microsoft Adds Security AI to MDASH at Half the Cost microsoft, mdash, mai-cyber-1-flash, ai-security, vulnerability-management, cybersecurity-ai, benchmark https://0daynews.com/articles/2026-07-28-microsoft-mai-cyber-1-flash-mdash-security-ai/cover.jpg Microsoft Adds Security AI to MDASH at Half the Cost https://0daynews.com/articles/2026-07-27-fastjson-rce-zero-day-active-exploitation/ 0dayNews en 2026-07-27T23:55:00.000Z FastJson Zero-Day Exploited in Attacks on US Firms fastjson, rce, zero-day, java, active-exploitation, deserialization https://0daynews.com/articles/2026-07-27-fastjson-rce-zero-day-active-exploitation/cover.jpg FastJson Zero-Day Exploited in Attacks on US Firms https://0daynews.com/articles/2026-07-27-operation-bluedash-fake-teams-rmm-lure/ 0dayNews en 2026-07-27T23:45:00.000Z BlueDash Delivers RMM Agents via Fake Teams Update phishing, RMM-abuse, ScreenConnect, Level-RMM, Microsoft-Teams, Operation-BlueDash, remote-access https://0daynews.com/articles/2026-07-27-operation-bluedash-fake-teams-rmm-lure/cover.jpg BlueDash Delivers RMM Agents via Fake Teams Update https://0daynews.com/articles/2026-07-27-nvidia-open-secure-ai-alliance-nooa/ 0dayNews en 2026-07-27T23:30:00.000Z NVIDIA Launches 37-Member Open AI Security Alliance nvidia, ai-security, open-secure-ai-alliance, nooa, ai-agents, open-source-security, machine-learning https://0daynews.com/articles/2026-07-27-nvidia-open-secure-ai-alliance-nooa/cover.jpg NVIDIA Launches 37-Member Open AI Security Alliance https://0daynews.com/articles/2026-07-27-certighost-poc-adcs-windows-domain-takeover/ 0dayNews en 2026-07-27T23:00:00.000Z Certighost PoC Drops: AD CS Flaw Enables Domain Takeover certighost, active-directory-certificate-services, adcs, windows, domain-takeover, proof-of-concept, microsoft https://0daynews.com/articles/2026-07-27-certighost-poc-adcs-windows-domain-takeover/cover.jpg Certighost PoC Drops: AD CS Flaw Enables Domain Takeover https://0daynews.com/articles/2026-07-27-dysphoria-botnet-blockchain-c2-iot-200k/ 0dayNews en 2026-07-27T22:00:00.000Z Dysphoria Botnet Uses Blockchain C2 to Resist Takedown dysphoria, botnet, iot, ddos, blockchain, c2, threat-intel https://0daynews.com/articles/2026-07-27-dysphoria-botnet-blockchain-c2-iot-200k/cover.jpg Dysphoria Botnet Uses Blockchain C2 to Resist Takedown https://0daynews.com/articles/2026-07-27-arista-velocloud-cve-2026-16812-kev/ 0dayNews en 2026-07-27T21:00:00.000Z Arista VeloCloud Orchestrator Hits CISA KEV arista, velocloud, command-injection, kev, cisa, sd-wan, cve-2026-16812 https://0daynews.com/articles/2026-07-27-arista-velocloud-cve-2026-16812-kev/cover.jpg Arista VeloCloud Orchestrator Hits CISA KEV https://0daynews.com/articles/2026-07-27-fortinet-forios-cve-2025-68686-kev/ 0dayNews en 2026-07-27T20:00:00.000Z Fortinet FortiOS Persistence Bypass Added to CISA KEV fortinet, forios, CVE-2025-68686, kev, symbolic-link, persistence, patch-bypass, cisa https://0daynews.com/articles/2026-07-27-fortinet-forios-cve-2025-68686-kev/cover.jpg Fortinet FortiOS Persistence Bypass Added to CISA KEV https://0daynews.com/articles/2026-07-27-apple-app-store-fake-sparrow-wallet-1-8m-bitcoin-lawsuit/ 0dayNews en 2026-07-27T19:00:00.000Z Fake App Store Wallet Drained $1.8M; Apple Faces Lawsuit App Store fraud, fake Sparrow Wallet, Bitcoin theft, seed phrase theft, crypto wallet scam, Apple lawsuit, mobile security https://0daynews.com/articles/2026-07-27-apple-app-store-fake-sparrow-wallet-1-8m-bitcoin-lawsuit/cover.jpg Fake App Store Wallet Drained $1.8M; Apple Faces Lawsuit https://0daynews.com/articles/2026-07-27-vbulletin-preauth-rce-public-exploit/ 0dayNews en 2026-07-27T18:00:00.000Z Public Exploit Out for vBulletin Pre-Auth RCE vbulletin, remote-code-execution, pre-auth, exploit, patch, forum-security, php https://0daynews.com/articles/2026-07-27-vbulletin-preauth-rce-public-exploit/cover.jpg Public Exploit Out for vBulletin Pre-Auth RCE https://0daynews.com/articles/2026-07-27-coca-cola-fairlife-data-theft-confirmed/ 0dayNews en 2026-07-27T17:00:00.000Z Coca-Cola Confirms Fairlife Data Theft coca-cola, fairlife, ransomware, data-breach, exfiltration, anubis, data-theft https://0daynews.com/articles/2026-07-27-coca-cola-fairlife-data-theft-confirmed/cover.jpg Coca-Cola Confirms Fairlife Data Theft https://0daynews.com/articles/2026-07-27-shinyhunters-claims-ey-breach-supply-chain/ 0dayNews en 2026-07-27T16:00:00.000Z ShinyHunters Claims EY Breach via Supply-Chain Attack ShinyHunters, Ernst & Young, EY, data breach, supply-chain attack, extortion https://0daynews.com/articles/2026-07-27-shinyhunters-claims-ey-breach-supply-chain/cover.jpg ShinyHunters Claims EY Breach via Supply-Chain Attack https://0daynews.com/articles/2026-07-27-n8n-sandbox-escape-cve-2026-27577-bypass/ 0dayNews en 2026-07-27T14:00:00.000Z n8n Sandbox Escape Bypasses February CVE-2026-27577 Patch n8n, sandbox-escape, CVE-2026-27577, workflow-automation, RCE, Security-Joes, patch https://0daynews.com/articles/2026-07-27-n8n-sandbox-escape-cve-2026-27577-bypass/cover.jpg n8n Sandbox Escape Bypasses February CVE-2026-27577 Patch https://0daynews.com/articles/2026-07-27-cruciferra-crypter-byovd-process-ghosting-india-tax/ 0dayNews en 2026-07-27T13:00:00.000Z Cruciferra Crypter: BYOVD and Process Ghosting on the Market cruciferra, byovd, process-ghosting, crypter, windows-malware, threat-intel, proofpoint https://0daynews.com/articles/2026-07-27-cruciferra-crypter-byovd-process-ghosting-india-tax/cover.jpg Cruciferra Crypter: BYOVD and Process Ghosting on the Market https://0daynews.com/articles/2026-07-27-github-pypi-dependabot-cooldown-supply-chain/ 0dayNews en 2026-07-27T12:00:00.000Z Dependabot Gets 3-Day Cooldown to Block Package Poisoning dependabot, github, pypi, supply-chain, dependency-management, package-poisoning, software-supply-chain https://0daynews.com/articles/2026-07-27-github-pypi-dependabot-cooldown-supply-chain/cover.jpg Dependabot Gets 3-Day Cooldown to Block Package Poisoning https://0daynews.com/articles/2026-07-27-teleshim-east-asia-apt-telegram-c2-middle-east/ 0dayNews en 2026-07-27T10:00:00.000Z TELESHIM Uses Telegram C2 Against Middle East Governments TELESHIM, MIXEDKEY, BINDCLOAK, Zscaler ThreatLabz, East Asia APT, Telegram C2, Middle East https://0daynews.com/articles/2026-07-27-teleshim-east-asia-apt-telegram-c2-middle-east/cover.jpg TELESHIM Uses Telegram C2 Against Middle East Governments https://0daynews.com/articles/2026-07-27-steam-forum-clickfix-xmrig-cryptominer/ 0dayNews en 2026-07-27T08:00:00.000Z Steam Forums Used to Deliver XMRig via ClickFix ClickFix, XMRig, Steam, cryptominer, Monero, social engineering, gaming https://0daynews.com/articles/2026-07-27-steam-forum-clickfix-xmrig-cryptominer/cover.jpg Steam Forums Used to Deliver XMRig via ClickFix https://0daynews.com/articles/2026-07-26-insurance-phishing-realtime-aitm-account-hijacking/ 0dayNews en 2026-07-26T23:00:00.000Z Insurance Phishing Moves to Real-Time Account Hijacking phishing, AiTM, adversary-in-the-middle, account takeover, insurance, MFA bypass, session hijacking https://0daynews.com/articles/2026-07-26-insurance-phishing-realtime-aitm-account-hijacking/cover.jpg Insurance Phishing Moves to Real-Time Account Hijacking https://0daynews.com/articles/2026-07-26-github-pypi-dependabot-time-based-supply-chain-defenses/ 0dayNews en 2026-07-26T14:30:00.000Z GitHub, PyPI Add Time-Gated Supply Chain Defenses supply-chain, dependabot, pypi, github, package security, dependency management, open source security https://0daynews.com/articles/2026-07-26-github-pypi-dependabot-time-based-supply-chain-defenses/cover.jpg GitHub, PyPI Add Time-Gated Supply Chain Defenses https://0daynews.com/articles/2026-07-26-chick-fil-a-credential-stuffing-13000-accounts/ 0dayNews en 2026-07-26T14:00:00.000Z Chick-fil-A: 13,000 Accounts Hit in Credential Stuffing credential stuffing, chick-fil-a, data breach, account takeover, mobile security https://0daynews.com/articles/2026-07-26-chick-fil-a-credential-stuffing-13000-accounts/cover.jpg Chick-fil-A: 13,000 Accounts Hit in Credential Stuffing