https://0daynews.com/articles/2026-07-11-sentinellabs-balochistan-police-china-india-converge/ 0dayNews en 2026-07-11T21:20:00.000Z China, India APTs Converge on Balochistan Police SentinelLABS, Balochistan Police, Mysterious Elephant, PlugX, ShadowPad, Pakistan, APT-C-08 https://0daynews.com/articles/2026-07-11-sentinellabs-balochistan-police-china-india-converge/cover.jpg China, India APTs Converge on Balochistan Police https://0daynews.com/articles/2026-07-11-jscrambler-npm-8-14-0-preinstall-rust-infostealer/ 0dayNews en 2026-07-11T20:15:00.000Z jscrambler 8.14.0 npm hijack: Rust stealer on install jscrambler, npm, supply-chain, preinstall, infostealer, Rust, Socket https://0daynews.com/articles/2026-07-11-mvpnalyzer-281-android-vpn-study-leaks-tracking/ 0dayNews en 2026-07-11T19:00:00.000Z 281 free Android VPN apps: 29 leak, 246 track android, vpn, mvpnalyzer, ndss, mobile, dns-leak, google-play https://0daynews.com/articles/2026-07-11-ptc-windchill-flexplm-cve-2026-12569-kev-jsp-webshell/ 0dayNews en 2026-07-11T17:15:00.000Z PTC Windchill PLM RCE is on KEV — shells still landing PTC Windchill, FlexPLM, CVE-2026-12569, CISA KEV, deserialization, JSP webshell, PLM https://0daynews.com/articles/2026-07-11-acsc-cms-plugin-exploitation-advisory-18-cves/ 0dayNews en 2026-07-11T15:05:00.000Z Australia's ACSC names 18 CMS bugs under exploitation ACSC, CMS, WordPress, Craft CMS, Joomla JCE, webshells, plugin exploitation https://0daynews.com/articles/2026-07-11-acsc-cms-plugin-exploitation-advisory-18-cves/cover.jpg Australia's ACSC names 18 CMS bugs under exploitation https://0daynews.com/articles/2026-07-11-gitea-docker-cve-2026-20896-sysdig-csa-1264-regression/ 0dayNews en 2026-07-11T12:03:16.000Z Gitea Docker Auth Bypass: Patch 1.26.4, CSA Confirms Gitea, CVE-2026-20896, Docker, Sysdig, Singapore CSA, reverse-proxy, authentication-bypass https://0daynews.com/articles/2026-07-11-u-boot-libfdt-fit-parsing-six-brly-flaws/ 0dayNews en 2026-07-11T11:15:00.000Z Six U-Boot flaws trace to one libfdt helper u-boot, libfdt, fit-image, bootloader, firmware, binarly, brly-2026-037 https://0daynews.com/articles/2026-07-11-ghostcommit-png-prompt-injection-coderabbit-bugbot/ 0dayNews en 2026-07-11T11:00:00.000Z Ghostcommit and the reviewers that don't open the PNG Ghostcommit, prompt injection, CodeRabbit, Bugbot, AI code review, supply chain https://0daynews.com/articles/2026-07-11-modbeacon-silver-fox-rust-rat-grpc-c2-qianxin/ 0dayNews en 2026-07-11T07:15:00.000Z Silver Fox ships MODBEACON, a Rust RAT with gRPC C2 Silver Fox, MODBEACON, QiAnXin, Rust malware, gRPC C2, SEO poisoning, counterfeit installers https://0daynews.com/articles/2026-07-11-modbeacon-silver-fox-rust-rat-grpc-c2-qianxin/cover.jpg Silver Fox ships MODBEACON, a Rust RAT with gRPC C2 https://0daynews.com/articles/2026-07-11-metasploit-weekly-flowise-csv-packagekit-modules/ 0dayNews en 2026-07-11T05:20:00.000Z Metasploit Weekly Adds Flowise CSV, macOS PackageKit Metasploit, Rapid7, Flowise, CVE-2026-41264, PackageKit, CVE-2024-27822, macOS, prompt injection https://0daynews.com/articles/2026-07-11-cisa-kev-balbooa-icagenda-joomla-file-upload/ 0dayNews en 2026-07-11T04:20:00.000Z Balbooa, iCagenda Join KEV: Four Joomla RCEs in Four Days CISA KEV, CVE-2026-56291, CVE-2026-48939, Balbooa Forms, iCagenda, Joomla, file upload, CWE-434 https://0daynews.com/articles/2026-07-10-openmandriva-beatrici-cooker-cosmic-gnome-admin-boundary/ 0dayNews en 2026-07-11T03:15:00.000Z OpenMandriva contributor deleted GNOME and Cosmic repos OpenMandriva, Davide Beatrici, Linux distribution, supply chain, maintainer trust, Cooker, GNOME https://0daynews.com/articles/2026-07-10-openmandriva-beatrici-cooker-cosmic-gnome-admin-boundary/cover.jpg OpenMandriva contributor deleted GNOME and Cosmic repos https://0daynews.com/articles/2026-07-11-zimbra-10-1-19-classic-web-client-xss-google-tag/ 0dayNews en 2026-07-11T02:15:00.000Z Zimbra ships 10.1.19; Google TAG reported the XSS Zimbra, Zimbra Collaboration Suite, Classic Web Client, stored XSS, Google TAG, Threat Analysis Group, webmail https://0daynews.com/articles/2026-07-11-npm-12-allowscripts-off-default-gats-oidc-branch/ 0dayNews en 2026-07-11T01:20:00.000Z npm 12 turns install scripts off by default npm, supply-chain, allowScripts, install-scripts, granular-access-tokens, oidc, github https://0daynews.com/articles/2026-07-11-npm-12-allowscripts-off-default-gats-oidc-branch/cover.jpg npm 12 turns install scripts off by default https://0daynews.com/articles/2026-07-10-iossifov-seized-crypto-wallet-still-had-key/ 0dayNews en 2026-07-10T23:55:00.000Z A seized crypto account that moved from a cell Rossen Iossifov, RG Coins, crypto seizure, Alexandria Online Auction Fraud Network, custody, forfeiture https://0daynews.com/articles/2026-07-10-iossifov-seized-crypto-wallet-still-had-key/cover.jpg A seized crypto account that moved from a cell https://0daynews.com/articles/2026-07-10-microsoft-mdash-msrc-humans-downstream/ 0dayNews en 2026-07-10T23:15:00.000Z Microsoft's MDASH and the humans downstream of it Microsoft, MDASH, MSRC, Patch Tuesday, AI vulnerability discovery, Windows security https://0daynews.com/articles/2026-07-10-microsoft-mdash-msrc-humans-downstream/cover.jpg Microsoft's MDASH and the humans downstream of it https://0daynews.com/articles/2026-07-10-openclaw-2026-6-6-nayak-whatsapp-host-rce-chain/ 0dayNews en 2026-07-10T22:15:00.000Z OpenClaw patched a chain that started in a chat message openclaw, ai-assistant, command-injection, sandbox-escape, whatsapp, chinmohan-nayak https://0daynews.com/articles/2026-07-10-openclaw-2026-6-6-nayak-whatsapp-host-rce-chain/cover.jpg OpenClaw patched a chain that started in a chat message https://0daynews.com/articles/2026-07-10-injective-sdk-ts-npm-oidc-thomasralee/ 0dayNews en 2026-07-10T21:15:00.000Z Injective SDK's npm compromise, and the OIDC that let it injective-labs, npm, supply-chain, sdk-ts, oidc, wallet-security https://0daynews.com/articles/2026-07-10-injective-sdk-ts-npm-oidc-thomasralee/cover.jpg Injective SDK's npm compromise, and the OIDC that let it https://0daynews.com/articles/2026-07-10-binarly-uboot-six-flaws-fit-signature-verification/ 0dayNews en 2026-07-10T20:20:00.000Z Six U-Boot bugs sit in front of the signature check U-Boot, Binarly, FIT image, firmware, signature verification, bootloader, BRLY-2026-037 https://0daynews.com/articles/2026-07-10-binarly-uboot-six-flaws-fit-signature-verification/cover.jpg Six U-Boot bugs sit in front of the signature check https://0daynews.com/articles/2026-07-10-vardanyan-ryuk-guilty-plea-portland-six-year-pipeline/ 0dayNews en 2026-07-10T19:15:00.000Z A Ryuk operator pleads guilty, six years after wind-down Ryuk, ransomware, Karen Vardanyan, Department of Justice, Conti, extradition, prosecution https://0daynews.com/articles/2026-07-10-politie-odido-dutch-speaker-vishing-shinyhunters-62m/ 0dayNews en 2026-07-10T18:15:00.000Z Politie Points at Dutch Hackers in the 88GB Odido Leak Odido, ShinyHunters, vishing, Politie, Netherlands, telecom-breach, social-engineering https://0daynews.com/articles/2026-07-10-politie-odido-dutch-speaker-vishing-shinyhunters-6.2m/cover.jpg Politie Points at Dutch Hackers in the 88GB Odido Leak https://0daynews.com/articles/2026-07-10-progress-sharefile-shutdown-storage-zone-moveit-echo/ 0dayNews en 2026-07-10T17:15:00.000Z Progress tells ShareFile on-prem users to shut down servers Progress Software, ShareFile, Storage Zone Controllers, managed file transfer, MOVEit, vendor advisory https://0daynews.com/articles/2026-07-10-progress-sharefile-shutdown-storage-zone-moveit-echo/cover.jpg Progress tells ShareFile on-prem users to shut down servers https://0daynews.com/articles/2026-07-10-donjon-tangem-laser-fault-injection-eal6-samsung/ 0dayNews en 2026-07-10T16:30:00.000Z A laser resets Tangem wallets, and there's no patch Tangem, Ledger Donjon, hardware wallet, fault injection, laser fault injection, EAL6+, Samsung S3D232A https://0daynews.com/articles/2026-07-10-foxio-xring-xquic-qpack-integer-underflow-alibaba-silence/ 0dayNews en 2026-07-10T15:15:00.000Z XRING: 260 bytes, no patch, three months of Alibaba silence XRING, XQUIC, Alibaba, HTTP/3, QPACK, FoxIO, integer underflow https://0daynews.com/articles/2026-07-10-foxio-xring-xquic-qpack-integer-underflow-alibaba-silence/cover.jpg XRING: 260 bytes, no patch, three months of Alibaba silence https://0daynews.com/articles/2026-07-10-wp-shellstorm-socradar-exposed-server-funnel/ 0dayNews en 2026-07-10T14:15:00.000Z WP-SHELLSTORM ran 22 days with its door left open WP-SHELLSTORM, SOCRadar, Ctrl-Alt-Intel, mass hacking, WordPress, Joomla, VShell, SNOWLIGHT https://0daynews.com/articles/2026-07-10-wp-shellstorm-socradar-exposed-server-funnel/cover.jpg WP-SHELLSTORM ran 22 days with its door left open https://0daynews.com/articles/2026-07-10-android-free-vpn-study-familiar-audit-outcome/ 0dayNews en 2026-07-10T13:15:00.000Z 281 free Android VPNs, and a familiar audit outcome Android VPN, free VPN, mobile privacy, DNS leak, Google Play, consumer VPN audit https://0daynews.com/articles/2026-07-10-android-free-vpn-study-familiar-audit-outcome/cover.jpg 281 free Android VPNs, and a familiar audit outcome https://0daynews.com/articles/2026-07-10-illbloom-coinspect-weak-prng-mobile-wallet-drain/ 0dayNews en 2026-07-10T10:30:00.000Z Ill Bloom is a $3.1M lesson in weak randomness, again Ill Bloom, Coinspect, PRNG, recovery phrase, BIP39, cryptocurrency wallet, wallet drainer https://0daynews.com/articles/2026-07-10-illbloom-coinspect-weak-prng-mobile-wallet-drain/cover.jpg Ill Bloom is a $3.1M lesson in weak randomness, again https://0daynews.com/articles/2026-07-10-digitalmint-martino-70-months-blackcat-insider-negotiation/ 0dayNews en 2026-07-10T09:20:00.000Z Ex-DigitalMint negotiator gets 70 months for BlackCat scheme BlackCat, ALPHV, DigitalMint, ransomware negotiation, insider threat, Angelo Martino, incident response https://0daynews.com/articles/2026-07-10-digitalmint-martino-70-months-blackcat-insider-negotiation/cover.jpg Ex-DigitalMint negotiator gets 70 months for BlackCat scheme https://0daynews.com/articles/2026-07-10-meta-muse-image-instagram-public-default-impersonation-surface/ 0dayNews en 2026-07-10T07:20:00.000Z Meta's Muse Image defaults on for public Instagram Meta AI, Muse Image, Instagram, impersonation, deepfake, vishing, threat model https://0daynews.com/articles/2026-07-10-meta-muse-image-instagram-public-default-impersonation-surface/cover.jpg Meta's Muse Image defaults on for public Instagram https://0daynews.com/articles/2026-07-10-clearinghouse-summer-athena-lightwell-old-pattern/ 0dayNews en 2026-07-10T06:15:00.000Z The clearinghouse boom is not new, and neither is the fatigue vulnerability disclosure, Chainguard, Athena, Project Lightwell, CVE, NVD, open source security https://0daynews.com/articles/2026-07-10-clearinghouse-summer-athena-lightwell-old-pattern/cover.jpg The clearinghouse boom is not new, and neither is the fatigue https://0daynews.com/articles/2026-07-10-hackernews-ato-verification-step-passkey-aftermath/ 0dayNews en 2026-07-10T05:00:00.000Z The ATO fight moved past credential stuffing account takeover, credential stuffing, passkeys, MFA, adversary-in-the-middle, The Hacker News https://0daynews.com/articles/2026-07-10-talos-hazel-winning-54-percent-defender-cliche/ 0dayNews en 2026-07-10T04:00:00.000Z Talos on 'attackers only need to be right once' Cisco Talos, defensive security, security clichés, defender mindset, Wimbledon, security marketing https://0daynews.com/articles/2026-07-10-datadog-dormant-github-ghost-accounts-org-enumeration/ 0dayNews en 2026-07-10T03:00:00.000Z Datadog: 50+ dormant GitHub accounts mapping org charts GitHub, Datadog Security Labs, reconnaissance, ghost accounts, OAuth tokens, Julie Agnes Sparks https://0daynews.com/articles/2026-07-09-openmandriva-beatrici-mumble-contributor-repo-sabotage/ 0dayNews en 2026-07-09T23:15:00.000Z OpenMandriva ex-contributor wipes GNOME, Cosmic packages OpenMandriva, Davide Beatrici, Mumble, insider threat, repository sabotage, Cooker, access review https://0daynews.com/articles/2026-07-09-openmandriva-beatrici-mumble-contributor-repo-sabotage/cover.jpg OpenMandriva ex-contributor wipes GNOME, Cosmic packages https://0daynews.com/articles/2026-07-09-talos-vdr-wolfssl-geovision-vtk-dicom-disclosure/ 0dayNews en 2026-07-09T22:35:00.000Z Talos discloses 18 vulns in WolfSSL, GeoVision, VTK-DICOM WolfSSL, GeoVision, VTK-DICOM, Cisco Talos, embedded firmware, third-party disclosure