https://0daynews.com/articles/2026-09-26-elementor-csrf-admin-account-creation/ 0dayNews en 2026-09-26T14:00:00.000Z Elementor CSRF Flaw Lets Attackers Create Admin Accounts wordpress, elementor, csrf, privilege-escalation, plugin-security https://0daynews.com/articles/2026-09-26-elementor-csrf-admin-account-creation/cover.jpg Elementor CSRF Flaw Lets Attackers Create Admin Accounts https://0daynews.com/articles/2026-09-26-mikrotik-cve-2026-67279-cisa-kev-chain/ 0dayNews en 2026-09-26T14:00:00.000Z CISA Adds MikroTik RouterOS Chain Flaw to KEV Catalog mikrotik, routeros, cve-2026-67279, cve-2026-86060, cisa kev, vulnerability chain, network security https://0daynews.com/articles/2026-09-26-mikrotik-cve-2026-67279-cisa-kev-chain/cover.jpg CISA Adds MikroTik RouterOS Chain Flaw to KEV Catalog https://0daynews.com/articles/2026-09-26-kiteworks-zero-day-warning-server-shutdown/ 0dayNews en 2026-09-26T12:00:00.000Z Kiteworks Flags Potential Zero-Day, Urges Server Shutdown kiteworks, zero-day, managed file transfer, enterprise security, secure file sharing, mft https://0daynews.com/articles/2026-09-26-kiteworks-zero-day-warning-server-shutdown/cover.jpg Kiteworks Flags Potential Zero-Day, Urges Server Shutdown https://0daynews.com/articles/2026-09-26-clop-moves-leak-site-grav-cms-attack-confirmed/ 0dayNews en 2026-09-26T08:00:00.000Z Clop Moves Leak Site After Grav CMS Attack Confirmed Clop, ShinyHunters, Grav CMS, ransomware, path traversal, data leak site, threat actors https://0daynews.com/articles/2026-09-26-clop-moves-leak-site-grav-cms-attack-confirmed/cover.jpg Clop Moves Leak Site After Grav CMS Attack Confirmed https://0daynews.com/articles/2026-09-26-soldier-70-months-att-verizon-telecom-extortion/ 0dayNews en 2026-09-26T06:00:00.000Z U.S. Soldier Gets 70 Months for Telecom Extortion AT&T, Verizon, telecom, extortion, sentencing, data theft, US Army https://0daynews.com/articles/2026-09-26-soldier-70-months-att-verizon-telecom-extortion/cover.jpg U.S. Soldier Gets 70 Months for Telecom Extortion https://0daynews.com/articles/2026-09-25-bitget-dprk-crypto-theft-351-million/ 0dayNews en 2026-09-25T12:00:00.000Z Suspected DPRK Hackers Steal $351.6M from Bitget bitget, north-korea, dprk, crypto-exchange, wallet-theft, backend-compromise https://0daynews.com/articles/2026-09-25-bitget-dprk-crypto-theft-351-million/cover.jpg Suspected DPRK Hackers Steal $351.6M from Bitget https://0daynews.com/articles/2026-09-25-salesbleed-salesforce-agentforce-zero-click-data-exfiltration/ 0dayNews en 2026-09-25T10:00:00.000Z SalesBleed: Agentforce Flaws Enable Data Exfiltration salesforce, agentforce, prompt injection, data exfiltration, agentic ai, salesbleed, cloud security https://0daynews.com/articles/2026-09-25-salesbleed-salesforce-agentforce-zero-click-data-exfiltration/cover.jpg SalesBleed: Agentforce Flaws Enable Data Exfiltration https://0daynews.com/articles/2026-09-25-wso2-adobe-commerce-cisa-kev-cve-2026-5430-cve-2026-71362/ 0dayNews en 2026-09-25T08:00:00.000Z CISA KEV: WSO2 and Adobe Commerce Flaws Exploited WSO2, Adobe Commerce, Magento, CISA KEV, CVE-2026-5430, CVE-2026-71362, patch deadline https://0daynews.com/articles/2026-09-25-wso2-adobe-commerce-cisa-kev-cve-2026-5430-cve-2026-71362/cover.jpg CISA KEV: WSO2 and Adobe Commerce Flaws Exploited https://0daynews.com/articles/2026-09-25-macsync-macos-icloud-calendar-c2/ 0dayNews en 2026-09-25T06:00:00.000Z MacSync macOS Malware Abuses Public iCloud Calendars macsync, macos, malware, icloud, infostealer, c2, clickfix, kaspersky https://0daynews.com/articles/2026-09-25-macsync-macos-icloud-calendar-c2/cover.jpg MacSync macOS Malware Abuses Public iCloud Calendars https://0daynews.com/articles/2026-09-25-vardanyan-ryuk-ransomware-sentenced-two-years/ 0dayNews en 2026-09-25T06:00:00.000Z Ryuk Member Gets 2 Years for $1.2M Ransomware Attacks Ryuk ransomware, Karen Vardanyan, sentencing, ransomware enforcement, cybercrime prosecution https://0daynews.com/articles/2026-09-25-vardanyan-ryuk-ransomware-sentenced-two-years/cover.jpg Ryuk Member Gets 2 Years for $1.2M Ransomware Attacks https://0daynews.com/articles/2026-09-24-roundcube-cve-2026-48842-active-exploit-sql-injection/ 0dayNews en 2026-09-24T14:30:00.000Z Roundcube SQL Injection Flaw Under Active Attack roundcube, sql-injection, CVE-2026-48842, webmail, active-exploitation, patch https://0daynews.com/articles/2026-09-24-roundcube-cve-2026-48842-active-exploit-sql-injection/cover.jpg Roundcube SQL Injection Flaw Under Active Attack