https://0daynews.com/articles/2026-07-18-doj-chen-zhang-queens-brooklyn-43m-investment-fraud-laundering-140-accounts-45-shells/ 0dayNews en 2026-07-18T18:15:00.000Z Two indicted over $43M laundered from investment scams money laundering, investment fraud, pig butchering, DOJ indictment, shell companies, HSI https://0daynews.com/articles/2026-07-18-doj-chen-zhang-queens-brooklyn-43m-investment-fraud-laundering-140-accounts-45-shells/cover.jpg Two indicted over $43M laundered from investment scams https://0daynews.com/articles/2026-07-18-nadmesh-go-botnet-shodan-comfyui-ollama-3811-aws-keys/ 0dayNews en 2026-07-18T16:15:00.000Z NadMesh botnet raids exposed AI tools for 3,811 AWS keys nadmesh, ollama, comfyui, langflow, n8n, open-webui, gradio, aws-keys, kubernetes, shodan, cloud-security https://0daynews.com/articles/2026-07-18-nadmesh-go-botnet-shodan-comfyui-ollama-3811-aws-keys/cover.jpg NadMesh botnet raids exposed AI tools for 3,811 AWS keys https://0daynews.com/articles/2026-07-18-expel-digicert-goldeneyedog-cylindricalcanine-27-ev-code-signing-certs-zhong-stealer/ 0dayNews en 2026-07-18T15:00:00.000Z Expel: GoldenEyeDog stole 27 EV certs from DigiCert digicert, goldeneyedog, cylindricalcanine, ev-code-signing, zhong-stealer, expel, supply-chain https://0daynews.com/articles/2026-07-18-expel-digicert-goldeneyedog-cylindricalcanine-27-ev-code-signing-certs-zhong-stealer/cover.jpg Expel: GoldenEyeDog stole 27 EV certs from DigiCert https://0daynews.com/articles/2026-07-18-abbott-shinyhunters-vishing-exact-sciences-labcentral-disputed/ 0dayNews en 2026-07-18T14:15:00.000Z Abbott confirms Exact Sciences hit; LabCentral disputed Abbott, Exact Sciences, LabCentral, ShinyHunters, vishing, Microsoft Entra, data extortion https://0daynews.com/articles/2026-07-18-abbott-shinyhunters-vishing-exact-sciences-labcentral-disputed/cover.jpg Abbott confirms Exact Sciences hit; LabCentral disputed https://0daynews.com/articles/2026-07-18-checkmarx-vitevenom-chainveil-seven-npm-tron-blockchain-c2/ 0dayNews en 2026-07-18T14:00:00.000Z Seven Vite-adjacent npm packages route a RAT through Tron ViteVenom, ChainVeil, Checkmarx, npm supply chain, Vite, blockchain C2, Tron https://0daynews.com/articles/2026-07-18-checkmarx-vitevenom-chainveil-seven-npm-tron-blockchain-c2/cover.jpg Seven Vite-adjacent npm packages route a RAT through Tron https://0daynews.com/articles/2026-07-18-okta-hollowbyte-openssl-dos-june-silent-fix/ 0dayNews en 2026-07-18T13:15:00.000Z HollowByte: 11-byte OpenSSL DoS, no CVE, silent June fix OpenSSL, HollowByte, denial-of-service, Okta Red Team, TLS, memory exhaustion, glibc https://0daynews.com/articles/2026-07-18-okta-hollowbyte-openssl-dos-june-silent-fix/cover.jpg HollowByte: 11-byte OpenSSL DoS, no CVE, silent June fix https://0daynews.com/articles/2026-07-18-wordpress-core-cve-2026-63030-wp2shell-rce-poc-public/ 0dayNews en 2026-07-18T13:05:00.000Z WordPress Core RCE (wp2shell): CVE-2026-63030, PoC public CVE-2026-63030, wp2shell, WordPress, WordPress Core, unauthenticated RCE, GitHub Security Advisory, public PoC https://0daynews.com/articles/2026-07-18-wordpress-core-cve-2026-63030-wp2shell-rce-poc-public/cover.jpg WordPress Core RCE (wp2shell): CVE-2026-63030, PoC public https://0daynews.com/articles/2026-07-18-choi-lee-seoul-uiuc-adi-agent-data-injection-web-coding-agents/ 0dayNews en 2026-07-18T10:15:00.000Z Agent Data Injection: The Bug Under Every AI Agent Agent Data Injection, AI agent security, indirect prompt injection, arXiv 2607.05120, Claude Code, Google Antigravity, probabilistic delimiter injection https://0daynews.com/articles/2026-07-18-choi-lee-seoul-uiuc-adi-agent-data-injection-web-coding-agents/cover.jpg Agent Data Injection: The Bug Under Every AI Agent https://0daynews.com/articles/2026-07-17-ec-google-android-qaap-mic-cam-screen-hotword-rival-ai/ 0dayNews en 2026-07-17T22:15:00.000Z EU order opens Android mic, cam, screen to rival AI agents Android, Google, European Commission, Digital Markets Act, Gemini, QAAP, hotword, prompt injection https://0daynews.com/articles/2026-07-17-ec-google-android-qaap-mic-cam-screen-hotword-rival-ai/cover.jpg EU order opens Android mic, cam, screen to rival AI agents https://0daynews.com/articles/2026-07-17-flare-2889-underground-posts-clean-residential-proxies-post-netnut/ 0dayNews en 2026-07-17T18:15:00.000Z Flare finds carders still hunting clean IPs post-NetNut Flare, residential proxies, carding, NetNut, Popa botnet, underground economy, antidetect browser https://0daynews.com/articles/2026-07-17-flare-2889-underground-posts-clean-residential-proxies-post-netnut/cover.jpg Flare finds carders still hunting clean IPs post-NetNut https://0daynews.com/articles/2026-07-17-ernst-young-third-party-support-ticket-breach-mar-apr-window/ 0dayNews en 2026-07-17T17:35:00.000Z EY discloses breach via third-party IT ticket system Ernst & Young, EY, third-party breach, support ticket system, tax data, Experian identity monitoring, Big Four https://0daynews.com/articles/2026-07-17-ernst-young-third-party-support-ticket-breach-mar-apr-window/cover.jpg EY discloses breach via third-party IT ticket system https://0daynews.com/articles/2026-07-17-armenia-detains-ermakov-yerevan-revil-warrant-identity-dispute/ 0dayNews en 2026-07-17T16:15:00.000Z Armenia detains Aleksandr Ermakov on US REvil warrant REvil, Sodinokibi, Aleksandr Ermakov, Armenia extradition, Interpol, Medibank, ransomware prosecution https://0daynews.com/articles/2026-07-17-armenia-detains-ermakov-yerevan-revil-warrant-identity-dispute/cover.jpg Armenia detains Aleksandr Ermakov on US REvil warrant https://0daynews.com/articles/2026-07-17-elastic-ottercookie-svg-flag-steganography-ai-tool-configs/ 0dayNews en 2026-07-17T15:15:00.000Z OtterCookie's fake interview now steals AI-tool configs OtterCookie, Contagious Interview, Elastic Security Labs, DPRK, SVG steganography, AI assistant configs, Slack recruiting lure, REF9403 https://0daynews.com/articles/2026-07-17-elastic-ottercookie-svg-flag-steganography-ai-tool-configs/cover.jpg OtterCookie's fake interview now steals AI-tool configs https://0daynews.com/articles/2026-07-17-kaspersky-goserpent-go-rat-tetrisphantom-overlap-apac-diplomatic/ 0dayNews en 2026-07-17T14:05:00.000Z GoSerpent: Go RAT hits APAC gov, TetrisPhantom overlap GoSerpent, TetrisPhantom, Kaspersky, Southeast Asia espionage, Go malware, Stowaway, McMx RAT https://0daynews.com/articles/2026-07-17-kaspersky-goserpent-go-rat-tetrisphantom-overlap-apac-diplomatic/cover.jpg GoSerpent: Go RAT hits APAC gov, TetrisPhantom overlap https://0daynews.com/articles/2026-07-17-nightmare-eclipse-legacyhive-windows-user-profile-service-lpe-zero-day/ 0dayNews en 2026-07-17T13:00:00.000Z LegacyHive: unpatched Windows LPE zero-day, PoC public LegacyHive, Nightmare Eclipse, Windows LPE, User Profile Service, usrclass.dat, registry hive, zero-day, Kevin Beaumont https://0daynews.com/articles/2026-07-17-nightmare-eclipse-legacyhive-windows-user-profile-service-lpe-zero-day/cover.jpg LegacyHive: unpatched Windows LPE zero-day, PoC public https://0daynews.com/articles/2026-07-17-microsoft-defender-experts-acr-stealer-clickfix-run-box-paste-and-run/ 0dayNews en 2026-07-17T11:15:00.000Z ACR Stealer, ClickFix, and why the Run box still works ACR Stealer, Amatera, AcridRain, ClickFix, infostealer, Microsoft Defender Experts, Microsoft 365 https://0daynews.com/articles/2026-07-17-microsoft-defender-experts-acr-stealer-clickfix-run-box-paste-and-run/cover.jpg ACR Stealer, ClickFix, and why the Run box still works https://0daynews.com/articles/2026-07-17-microsoft-windows-server-2022-mainstream-eos-october-13-extended-2031/ 0dayNews en 2026-07-17T10:15:00.000Z Windows Server 2022 mainstream support ends Oct 13 Windows Server 2022, Microsoft, end of mainstream support, extended support, Windows Server 2025, lifecycle https://0daynews.com/articles/2026-07-17-microsoft-windows-server-2022-mainstream-eos-october-13-extended-2031/cover.jpg Windows Server 2022 mainstream support ends Oct 13 https://0daynews.com/articles/2026-07-17-doj-chen-zhang-43m-money-laundering-140-accounts-45-shells/ 0dayNews en 2026-07-17T09:15:00.000Z The plumbing behind $43M in investment-fraud losses pig-butchering, money laundering, investment fraud, HSI, shell companies, Zhuoying Chen, Haojie Zhang https://0daynews.com/articles/2026-07-17-doj-chen-zhang-43m-money-laundering-140-accounts-45-shells/cover.jpg The plumbing behind $43M in investment-fraud losses https://0daynews.com/articles/2026-07-16-microsoft-windows-11-24h2-home-pro-eos-october-13-25h2-enablement/ 0dayNews en 2026-07-17T01:30:00.000Z Windows 11 24H2 Home and Pro: 90 days to end of updates Windows 11, 24H2, 25H2, end of support, lifecycle, Microsoft, LTSB 2016 https://0daynews.com/articles/2026-07-16-microsoft-windows-11-24h2-home-pro-eos-october-13-25h2-enablement/cover.jpg Windows 11 24H2 Home and Pro: 90 days to end of updates https://0daynews.com/articles/2026-07-17-n8n-cve-2026-59208-cross-issuer-token-exchange-sub-iss/ 0dayNews en 2026-07-17T00:20:00.000Z n8n cross-issuer JWT bypass logs attackers in as anyone n8n, CVE-2026-59208, token exchange, JWT, multi-issuer, SSO, workflow automation https://0daynews.com/articles/2026-07-17-n8n-cve-2026-59208-cross-issuer-token-exchange-sub-iss/cover.jpg n8n cross-issuer JWT bypass logs attackers in as anyone https://0daynews.com/articles/2026-07-16-talos-uat-11795-starland-rat-wldr-c2-trojanized-installers/ 0dayNews en 2026-07-16T23:30:00.000Z UAT-11795 hides Starland RAT in trojanized installers UAT-11795, Starland RAT, WLDR C2, Cisco Talos, CastleStealer, Remcos RAT, trojanized installer https://0daynews.com/articles/2026-07-16-talos-uat-11795-starland-rat-wldr-c2-trojanized-installers/cover.jpg UAT-11795 hides Starland RAT in trojanized installers https://0daynews.com/articles/2026-07-16-sans-stephen-sims-bugcrowd-ai-triage-proof-standard/ 0dayNews en 2026-07-16T23:15:00.000Z AI can find the bug. Proving it is still the job. ai security, bug bounty, bugcrowd, sans, vulnerability discovery, proof of exploit, stephen sims https://0daynews.com/articles/2026-07-16-sans-stephen-sims-bugcrowd-ai-triage-proof-standard/cover.jpg AI can find the bug. Proving it is still the job. https://0daynews.com/articles/2026-07-16-elastic-telepuz-clickfix-maas-vidar-stage-two/ 0dayNews en 2026-07-16T22:20:00.000Z Elastic: TELEPUZ ClickFix stealer confirmed since April TELEPUZ, Elastic Security Labs, ClickFix, Vidar Stealer, malware-as-a-service, Polygon smart contract, infostealer https://0daynews.com/articles/2026-07-16-elastic-telepuz-clickfix-maas-vidar-stage-two/cover.jpg Elastic: TELEPUZ ClickFix stealer confirmed since April https://0daynews.com/articles/2026-07-16-coca-cola-fairlife-ransomware-sec-8k-us-production-halt/ 0dayNews en 2026-07-16T22:00:00.000Z Coca-Cola halts Fairlife US production after ransomware Fairlife ransomware, Coca-Cola SEC 8-K, dairy production halt, ransomware disclosure, food and beverage ransomware https://0daynews.com/articles/2026-07-16-coca-cola-fairlife-ransomware-sec-8k-us-production-halt/cover.jpg Coca-Cola halts Fairlife US production after ransomware https://0daynews.com/articles/2026-07-16-cisa-kev-sharepoint-cve-2026-58644-deserialization-fourth-in-week/ 0dayNews en 2026-07-16T21:15:00.000Z CISA adds a fourth SharePoint bug to KEV in 48 hours SharePoint, CISA KEV, CVE-2026-58644, deserialization, BOD 26-04, patch management https://0daynews.com/articles/2026-07-16-cisa-kev-sharepoint-cve-2026-58644-deserialization-fourth-in-week/cover.jpg CISA adds a fourth SharePoint bug to KEV in 48 hours https://0daynews.com/articles/2026-07-16-agent-data-injection-choi-snu-uiuc-probabilistic-delimiter/ 0dayNews en 2026-07-16T20:15:00.000Z Agent Data Injection: SQL injection, different decade agent data injection, prompt injection, ai agents, llm security, claude in chrome, coding agents, trust boundary https://0daynews.com/articles/2026-07-16-agent-data-injection-choi-snu-uiuc-probabilistic-delimiter/cover.jpg Agent Data Injection: SQL injection, different decade