https://0daynews.com/articles/2026-07-26-github-pypi-dependabot-time-based-supply-chain-defenses/ 0dayNews en 2026-07-26T14:30:00.000Z GitHub, PyPI Add Time-Gated Supply Chain Defenses supply-chain, dependabot, pypi, github, package security, dependency management, open source security https://0daynews.com/articles/2026-07-26-github-pypi-dependabot-time-based-supply-chain-defenses/cover.jpg GitHub, PyPI Add Time-Gated Supply Chain Defenses https://0daynews.com/articles/2026-07-26-chick-fil-a-credential-stuffing-13000-accounts/ 0dayNews en 2026-07-26T14:00:00.000Z Chick-fil-A: 13,000 Accounts Hit in Credential Stuffing credential stuffing, chick-fil-a, data breach, account takeover, mobile security https://0daynews.com/articles/2026-07-26-chick-fil-a-credential-stuffing-13000-accounts/cover.jpg Chick-fil-A: 13,000 Accounts Hit in Credential Stuffing https://0daynews.com/articles/2026-07-26-bluenoroff-zoom-phishing-kit-crypto-wallets/ 0dayNews en 2026-07-26T08:00:00.000Z BlueNoroff Active: Zoom Phishing Profiles Crypto Wallets BlueNoroff, North Korea, DPRK, phishing, cryptocurrency, wallet theft, ClickFix https://0daynews.com/articles/2026-07-26-bluenoroff-zoom-phishing-kit-crypto-wallets/cover.jpg BlueNoroff Active: Zoom Phishing Profiles Crypto Wallets https://0daynews.com/articles/2026-07-26-slopsquatting-ai-coding-agent-supply-chain/ 0dayNews en 2026-07-26T07:00:00.000Z Slopsquatting Has Three Names. The Attack Is the Same. slopsquatting, HalluSquatting, supply-chain, AI coding agents, package hallucination, phantom packages, software supply chain https://0daynews.com/articles/2026-07-26-slopsquatting-ai-coding-agent-supply-chain/cover.jpg Slopsquatting Has Three Names. The Attack Is the Same. https://0daynews.com/articles/2026-07-26-hermes-ai-agent-yolo-post-exploitation-thai-finance/ 0dayNews en 2026-07-26T06:00:00.000Z Open-Source AI Agent Used in Gov Post-Exploitation Attack ai-agent, hermes, post-exploitation, thailand, government, threat-intel, automation https://0daynews.com/articles/2026-07-26-hermes-ai-agent-yolo-post-exploitation-thai-finance/cover.jpg Open-Source AI Agent Used in Gov Post-Exploitation Attack https://0daynews.com/articles/2026-07-26-hotel-wifi-dns-hijack-m365-credential-theft/ 0dayNews en 2026-07-26T03:00:00.000Z Hotel Wi-Fi DNS Hijacked to Serve Fake M365 Pages dns hijacking, microsoft 365, hotel wifi, credential theft, phishing, network security https://0daynews.com/articles/2026-07-26-hotel-wifi-dns-hijack-m365-credential-theft/cover.jpg Hotel Wi-Fi DNS Hijacked to Serve Fake M365 Pages https://0daynews.com/articles/2026-07-25-steam-clickfix-xmrig-cryptominer-gamers/ 0dayNews en 2026-07-25T23:30:00.000Z Steam Forums Weaponized in ClickFix Cryptominer Campaign clickfix, xmrig, steam, cryptominer, cryptojacking, social-engineering, gaming https://0daynews.com/articles/2026-07-25-steam-clickfix-xmrig-cryptominer-gamers/cover.jpg Steam Forums Weaponized in ClickFix Cryptominer Campaign https://0daynews.com/articles/2026-07-25-bing-images-cve-2026-32194-32191-svg-system-rce/ 0dayNews en 2026-07-25T21:00:00.000Z Bing Image Workers Ran SYSTEM Commands via Crafted SVGs ImageMagick, Bing, SVG, RCE, Microsoft, XBOW, command-injection https://0daynews.com/articles/2026-07-25-bing-images-cve-2026-32194-32191-svg-system-rce/cover.jpg Bing Image Workers Ran SYSTEM Commands via Crafted SVGs https://0daynews.com/articles/2026-07-25-certighost-ad-cs-domain-controller-exploit/ 0dayNews en 2026-07-25T21:00:00.000Z Certighost: Working Exploit Reaches AD Domain Controllers Active Directory, Certighost, AD CS, DCSync, domain controller, Kerberos https://0daynews.com/articles/2026-07-25-certighost-ad-cs-domain-controller-exploit/cover.jpg Certighost: Working Exploit Reaches AD Domain Controllers https://0daynews.com/articles/2026-07-25-ctm360-aitm-insurance-phishing-real-time-mfa/ 0dayNews en 2026-07-25T17:00:00.000Z Insurance Sector Phishing Has Evolved to Real-Time AiTM phishing, AiTM, MFA bypass, account takeover, insurance, adversary-in-the-middle, session hijacking https://0daynews.com/articles/2026-07-25-ctm360-aitm-insurance-phishing-real-time-mfa/cover.jpg Insurance Sector Phishing Has Evolved to Real-Time AiTM https://0daynews.com/articles/2026-07-25-shinyhunters-breach-data-sextortion-2000-bitcoin/ 0dayNews en 2026-07-25T15:30:00.000Z ShinyHunters Breach Data Now Fueling Sextortion Emails shinyhunters, sextortion, bitcoin, data breach, extortion, email scam https://0daynews.com/articles/2026-07-25-shinyhunters-breach-data-sextortion-2000-bitcoin/cover.jpg ShinyHunters Breach Data Now Fueling Sextortion Emails https://0daynews.com/articles/2026-07-25-malvertising-javascript-in-memory-malware/ 0dayNews en 2026-07-25T15:21:09.000Z JS Malvertising Assembles Malware in Browser Memory malvertising, in-memory malware, fileless malware, JavaScript, browser security, Solana, TradingView https://0daynews.com/articles/2026-07-25-malvertising-javascript-in-memory-malware/cover.jpg JS Malvertising Assembles Malware in Browser Memory https://0daynews.com/articles/2026-07-25-fastjson-1x-cve-2026-16723-rce-no-patch/ 0dayNews en 2026-07-25T14:00:00.000Z Fastjson 1.x RCE Exploited: No Patch Available fastjson, CVE-2026-16723, RCE, Spring Boot, Java, deserialization, unauthenticated https://0daynews.com/articles/2026-07-25-fastjson-1x-cve-2026-16723-rce-no-patch/cover.jpg Fastjson 1.x RCE Exploited: No Patch Available https://0daynews.com/articles/2026-07-25-devman-raas-funky-mantis-affiliate-portal/ 0dayNews en 2026-07-25T13:05:00.000Z DevMan RaaS Offers Affiliates Centralized Build Portal ransomware, RaaS, DevMan, PRODAFT, Funky Mantis, affiliate, malware-as-a-service https://0daynews.com/articles/2026-07-25-devman-raas-funky-mantis-affiliate-portal/cover.jpg DevMan RaaS Offers Affiliates Centralized Build Portal https://0daynews.com/articles/2026-07-25-gitlab-18-11-3-rce-poc-published/ 0dayNews en 2026-07-25T10:00:00.000Z GitLab RCE PoC Published: No Admin Rights Required GitLab, RCE, remote code execution, PoC, Jupyter notebook, depthfirst, self-managed GitLab https://0daynews.com/articles/2026-07-25-gitlab-18-11-3-rce-poc-published/cover.jpg GitLab RCE PoC Published: No Admin Rights Required https://0daynews.com/articles/2026-07-25-clop-targets-ptc-windchill-flexplm-data-theft/ 0dayNews en 2026-07-25T09:00:00.000Z Clop Hits Windchill and FlexPLM in Data-Theft Push Clop, PTC Windchill, FlexPLM, ransomware, data theft, extortion, PLM https://0daynews.com/articles/2026-07-25-clop-targets-ptc-windchill-flexplm-data-theft/cover.jpg Clop Hits Windchill and FlexPLM in Data-Theft Push https://0daynews.com/articles/2026-07-25-ai-agents-attacker-auditor-attack-surface/ 0dayNews en 2026-07-25T08:00:00.000Z AI Agents: Attacker, Auditor, and Attack Surface ai agents, autonomous agents, ai security, redis, nodebb, hermes, kimi k3 https://0daynews.com/articles/2026-07-25-ai-agents-attacker-auditor-attack-surface/cover.jpg AI Agents: Attacker, Auditor, and Attack Surface https://0daynews.com/articles/2026-07-25-q2-2026-cvss-epss-patching-gap-talos/ 0dayNews en 2026-07-25T05:00:00.000Z 200 CVEs a Day: Why CVSS Scores Mislead Defenders patching prioritization, CVSS, EPSS, KEV, vulnerability management, CVE growth, Q2 2026 https://0daynews.com/articles/2026-07-25-q2-2026-cvss-epss-patching-gap-talos/cover.jpg 200 CVEs a Day: Why CVSS Scores Mislead Defenders https://0daynews.com/articles/2026-07-24-microsoft-365-outage-maintenance-bug-root-cause/ 0dayNews en 2026-07-25T01:00:00.000Z M365 Outage: Automation Bug Pulled Too Many IP Routes Microsoft 365, outage, Azure, automation bug, IP routing, network maintenance, Teams outage https://0daynews.com/articles/2026-07-24-microsoft-365-outage-maintenance-bug-root-cause/cover.jpg M365 Outage: Automation Bug Pulled Too Many IP Routes https://0daynews.com/articles/2026-07-24-snapchat-hacker-illinois-76-months/ 0dayNews en 2026-07-24T23:00:00.000Z 76 Months for Hacking 750 Women's Snapchat Accounts Snapchat, account compromise, credential theft, sentencing, enforcement, intimate images, cybercrime https://0daynews.com/articles/2026-07-24-snapchat-hacker-illinois-76-months/cover.jpg 76 Months for Hacking 750 Women's Snapchat Accounts