https://0daynews.com/articles/2026-07-28-nimbus-manticore-nightledger-iran-apt-mena/ 0dayNews en 2026-07-28T19:00:00.000Z Nimbus Manticore Targets MENA With NightLedger Backdoor nimbus-manticore, nightledger, iranian-apt, unc1549, windows-backdoor, threat-intel, websocket-c2 https://0daynews.com/articles/2026-07-28-nimbus-manticore-nightledger-iran-apt-mena/cover.jpg Nimbus Manticore Targets MENA With NightLedger Backdoor https://0daynews.com/articles/2026-07-28-openwrt-24-10-8-dhcpv6-rce-critical/ 0dayNews en 2026-07-28T18:00:00.000Z OpenWrt Patches Critical DHCPv6 RCE in Default Server OpenWrt, DHCPv6, odhcpd, RCE, stack-overflow, router, embedded-linux, patch https://0daynews.com/articles/2026-07-28-openwrt-24-10-8-dhcpv6-rce-critical/cover.jpg OpenWrt Patches Critical DHCPv6 RCE in Default Server https://0daynews.com/articles/2026-07-28-tengu-botnet-linux-watchdog-persistence/ 0dayNews en 2026-07-28T17:00:00.000Z Tengu Botnet Weaponizes Linux Watchdog for Persistence tengu, botnet, mirai, linux, iot, watchdog, ddos, persistence, nozomi-networks https://0daynews.com/articles/2026-07-28-tengu-botnet-linux-watchdog-persistence/cover.jpg Tengu Botnet Weaponizes Linux Watchdog for Persistence https://0daynews.com/articles/2026-07-28-fastjson-rce-zero-day-us-firms/ 0dayNews en 2026-07-28T16:00:00.000Z FastJson Zero-Day RCE: Active Exploitation Hits US Firms fastjson, java, rce, zero-day, active-exploitation, alibaba, deserialization https://0daynews.com/articles/2026-07-28-fastjson-rce-zero-day-us-firms/cover.jpg FastJson Zero-Day RCE: Active Exploitation Hits US Firms https://0daynews.com/articles/2026-07-28-openai-models-jfrog-artifactory-zero-day-sandbox-escape/ 0dayNews en 2026-07-28T15:00:00.000Z AI Models Exploited JFrog Artifactory Zero-Day to Reach Web JFrog, Artifactory, zero-day, OpenAI, AI-agents, sandbox-escape, privilege-escalation, lateral-movement https://0daynews.com/articles/2026-07-28-openai-models-jfrog-artifactory-zero-day-sandbox-escape/cover.jpg AI Models Exploited JFrog Artifactory Zero-Day to Reach Web https://0daynews.com/articles/2026-07-28-exposed-bmc-ipmi-password-hash-leak/ 0dayNews en 2026-07-28T13:00:00.000Z 24K Exposed BMCs Leak Auth Hashes via Decades-Old Flaw BMC, IPMI, password-hash, server-security, credential-exposure, baseboard-management-controller, network-exposure https://0daynews.com/articles/2026-07-28-exposed-bmc-ipmi-password-hash-leak/cover.jpg 24K Exposed BMCs Leak Auth Hashes via Decades-Old Flaw https://0daynews.com/articles/2026-07-28-talos-q2-ir-phishing-rmm-abuse/ 0dayNews en 2026-07-28T12:00:00.000Z Q2 IR: Phishing and RMM Abuse Lead Attack Chains phishing, RMM-abuse, threat-intelligence, incident-response, Q2-2026, Talos, initial-access https://0daynews.com/articles/2026-07-28-talos-q2-ir-phishing-rmm-abuse/cover.jpg Q2 IR: Phishing and RMM Abuse Lead Attack Chains https://0daynews.com/articles/2026-07-28-linux-kernel-tc-cve-2026-53264-lpe/ 0dayNews en 2026-07-28T11:00:00.000Z Linux Kernel tc Race Yields Root Exploit (CVSS 7.8) CVE-2026-53264, linux-kernel, privilege-escalation, use-after-free, race-condition, traffic-control, STAR-Labs https://0daynews.com/articles/2026-07-28-linux-kernel-tc-cve-2026-53264-lpe/cover.jpg Linux Kernel tc Race Yields Root Exploit (CVSS 7.8) https://0daynews.com/articles/2026-07-28-mcbs-medical-billing-breach-1-26m/ 0dayNews en 2026-07-28T10:30:00.000Z MCBS Medical Billing Breach Exposes 1.26M Records data breach, healthcare, MCBS, medical billing, PII, HIPAA https://0daynews.com/articles/2026-07-28-mcbs-medical-billing-breach-1-26m/cover.jpg MCBS Medical Billing Breach Exposes 1.26M Records https://0daynews.com/articles/2026-07-27-arista-velocloud-cve-2026-16812-kev/ 0dayNews en 2026-07-28T10:00:00.000Z Arista VeloCloud CVE-2026-16812 Hits KEV, Patch Now CVE-2026-16812, arista, velocloud, sd-wan, command-injection, kev, patch https://0daynews.com/articles/2026-07-27-arista-velocloud-cve-2026-16812-kev/cover.jpg Arista VeloCloud CVE-2026-16812 Hits KEV, Patch Now https://0daynews.com/articles/2026-07-28-teamcity-cve-2026-63077-rce-all-onprem/ 0dayNews en 2026-07-28T10:00:00.000Z TeamCity 9.8 RCE Flaw Hits All On-Prem Versions teamcity, jetbrains, CVE-2026-63077, RCE, critical, on-premises, patch https://0daynews.com/articles/2026-07-28-teamcity-cve-2026-63077-rce-all-onprem/cover.jpg TeamCity 9.8 RCE Flaw Hits All On-Prem Versions https://0daynews.com/articles/2026-07-28-microsoft-mai-cyber-1-flash-mdash-security-ai/ 0dayNews en 2026-07-28T07:00:00.000Z Microsoft Adds Security AI to MDASH at Half the Cost microsoft, mdash, mai-cyber-1-flash, ai-security, vulnerability-management, cybersecurity-ai, benchmark https://0daynews.com/articles/2026-07-28-microsoft-mai-cyber-1-flash-mdash-security-ai/cover.jpg Microsoft Adds Security AI to MDASH at Half the Cost https://0daynews.com/articles/2026-07-27-fastjson-rce-zero-day-active-exploitation/ 0dayNews en 2026-07-27T23:55:00.000Z FastJson Zero-Day Exploited in Attacks on US Firms fastjson, rce, zero-day, java, active-exploitation, deserialization https://0daynews.com/articles/2026-07-27-fastjson-rce-zero-day-active-exploitation/cover.jpg FastJson Zero-Day Exploited in Attacks on US Firms https://0daynews.com/articles/2026-07-27-operation-bluedash-fake-teams-rmm-lure/ 0dayNews en 2026-07-27T23:45:00.000Z BlueDash Delivers RMM Agents via Fake Teams Update phishing, RMM-abuse, ScreenConnect, Level-RMM, Microsoft-Teams, Operation-BlueDash, remote-access https://0daynews.com/articles/2026-07-27-operation-bluedash-fake-teams-rmm-lure/cover.jpg BlueDash Delivers RMM Agents via Fake Teams Update https://0daynews.com/articles/2026-07-27-nvidia-open-secure-ai-alliance-nooa/ 0dayNews en 2026-07-27T23:30:00.000Z NVIDIA Launches 37-Member Open AI Security Alliance nvidia, ai-security, open-secure-ai-alliance, nooa, ai-agents, open-source-security, machine-learning https://0daynews.com/articles/2026-07-27-nvidia-open-secure-ai-alliance-nooa/cover.jpg NVIDIA Launches 37-Member Open AI Security Alliance https://0daynews.com/articles/2026-07-27-certighost-poc-adcs-windows-domain-takeover/ 0dayNews en 2026-07-27T23:00:00.000Z Certighost PoC Drops: AD CS Flaw Enables Domain Takeover certighost, active-directory-certificate-services, adcs, windows, domain-takeover, proof-of-concept, microsoft https://0daynews.com/articles/2026-07-27-certighost-poc-adcs-windows-domain-takeover/cover.jpg Certighost PoC Drops: AD CS Flaw Enables Domain Takeover https://0daynews.com/articles/2026-07-27-dysphoria-botnet-blockchain-c2-iot-200k/ 0dayNews en 2026-07-27T22:00:00.000Z Dysphoria Botnet Uses Blockchain C2 to Resist Takedown dysphoria, botnet, iot, ddos, blockchain, c2, threat-intel https://0daynews.com/articles/2026-07-27-dysphoria-botnet-blockchain-c2-iot-200k/cover.jpg Dysphoria Botnet Uses Blockchain C2 to Resist Takedown https://0daynews.com/articles/2026-07-27-fortinet-forios-cve-2025-68686-kev/ 0dayNews en 2026-07-27T20:00:00.000Z Fortinet FortiOS Persistence Bypass Added to CISA KEV fortinet, forios, CVE-2025-68686, kev, symbolic-link, persistence, patch-bypass, cisa https://0daynews.com/articles/2026-07-27-fortinet-forios-cve-2025-68686-kev/cover.jpg Fortinet FortiOS Persistence Bypass Added to CISA KEV https://0daynews.com/articles/2026-07-27-apple-app-store-fake-sparrow-wallet-1-8m-bitcoin-lawsuit/ 0dayNews en 2026-07-27T19:00:00.000Z Fake App Store Wallet Drained $1.8M; Apple Faces Lawsuit App Store fraud, fake Sparrow Wallet, Bitcoin theft, seed phrase theft, crypto wallet scam, Apple lawsuit, mobile security https://0daynews.com/articles/2026-07-27-apple-app-store-fake-sparrow-wallet-1-8m-bitcoin-lawsuit/cover.jpg Fake App Store Wallet Drained $1.8M; Apple Faces Lawsuit https://0daynews.com/articles/2026-07-27-vbulletin-preauth-rce-public-exploit/ 0dayNews en 2026-07-27T18:00:00.000Z Public Exploit Out for vBulletin Pre-Auth RCE vbulletin, remote-code-execution, pre-auth, exploit, patch, forum-security, php https://0daynews.com/articles/2026-07-27-vbulletin-preauth-rce-public-exploit/cover.jpg Public Exploit Out for vBulletin Pre-Auth RCE https://0daynews.com/articles/2026-07-27-coca-cola-fairlife-data-theft-confirmed/ 0dayNews en 2026-07-27T17:00:00.000Z Coca-Cola Confirms Fairlife Data Theft coca-cola, fairlife, ransomware, data-breach, exfiltration, anubis, data-theft https://0daynews.com/articles/2026-07-27-coca-cola-fairlife-data-theft-confirmed/cover.jpg Coca-Cola Confirms Fairlife Data Theft https://0daynews.com/articles/2026-07-27-shinyhunters-claims-ey-breach-supply-chain/ 0dayNews en 2026-07-27T16:00:00.000Z ShinyHunters Claims EY Breach via Supply-Chain Attack ShinyHunters, Ernst & Young, EY, data breach, supply-chain attack, extortion https://0daynews.com/articles/2026-07-27-shinyhunters-claims-ey-breach-supply-chain/cover.jpg ShinyHunters Claims EY Breach via Supply-Chain Attack https://0daynews.com/articles/2026-07-27-n8n-sandbox-escape-cve-2026-27577-bypass/ 0dayNews en 2026-07-27T14:00:00.000Z n8n Sandbox Escape Bypasses February CVE-2026-27577 Patch n8n, sandbox-escape, CVE-2026-27577, workflow-automation, RCE, Security-Joes, patch https://0daynews.com/articles/2026-07-27-n8n-sandbox-escape-cve-2026-27577-bypass/cover.jpg n8n Sandbox Escape Bypasses February CVE-2026-27577 Patch https://0daynews.com/articles/2026-07-27-cruciferra-crypter-byovd-process-ghosting-india-tax/ 0dayNews en 2026-07-27T13:00:00.000Z Cruciferra Crypter: BYOVD and Process Ghosting on the Market cruciferra, byovd, process-ghosting, crypter, windows-malware, threat-intel, proofpoint https://0daynews.com/articles/2026-07-27-cruciferra-crypter-byovd-process-ghosting-india-tax/cover.jpg Cruciferra Crypter: BYOVD and Process Ghosting on the Market https://0daynews.com/articles/2026-07-27-github-pypi-dependabot-cooldown-supply-chain/ 0dayNews en 2026-07-27T12:00:00.000Z Dependabot Gets 3-Day Cooldown to Block Package Poisoning dependabot, github, pypi, supply-chain, dependency-management, package-poisoning, software-supply-chain https://0daynews.com/articles/2026-07-27-github-pypi-dependabot-cooldown-supply-chain/cover.jpg Dependabot Gets 3-Day Cooldown to Block Package Poisoning https://0daynews.com/articles/2026-07-27-teleshim-east-asia-apt-telegram-c2-middle-east/ 0dayNews en 2026-07-27T10:00:00.000Z TELESHIM Uses Telegram C2 Against Middle East Governments TELESHIM, MIXEDKEY, BINDCLOAK, Zscaler ThreatLabz, East Asia APT, Telegram C2, Middle East https://0daynews.com/articles/2026-07-27-teleshim-east-asia-apt-telegram-c2-middle-east/cover.jpg TELESHIM Uses Telegram C2 Against Middle East Governments https://0daynews.com/articles/2026-07-27-steam-forum-clickfix-xmrig-cryptominer/ 0dayNews en 2026-07-27T08:00:00.000Z Steam Forums Used to Deliver XMRig via ClickFix ClickFix, XMRig, Steam, cryptominer, Monero, social engineering, gaming https://0daynews.com/articles/2026-07-27-steam-forum-clickfix-xmrig-cryptominer/cover.jpg Steam Forums Used to Deliver XMRig via ClickFix https://0daynews.com/articles/2026-07-26-insurance-phishing-realtime-aitm-account-hijacking/ 0dayNews en 2026-07-26T23:00:00.000Z Insurance Phishing Moves to Real-Time Account Hijacking phishing, AiTM, adversary-in-the-middle, account takeover, insurance, MFA bypass, session hijacking https://0daynews.com/articles/2026-07-26-insurance-phishing-realtime-aitm-account-hijacking/cover.jpg Insurance Phishing Moves to Real-Time Account Hijacking