https://0daynews.com/articles/2026-07-27-teleshim-east-asia-apt-telegram-c2-middle-east/ 0dayNews en 2026-07-27T10:00:00.000Z TELESHIM Uses Telegram C2 Against Middle East Governments TELESHIM, MIXEDKEY, BINDCLOAK, Zscaler ThreatLabz, East Asia APT, Telegram C2, Middle East https://0daynews.com/articles/2026-07-27-teleshim-east-asia-apt-telegram-c2-middle-east/cover.jpg TELESHIM Uses Telegram C2 Against Middle East Governments https://0daynews.com/articles/2026-07-27-steam-forum-clickfix-xmrig-cryptominer/ 0dayNews en 2026-07-27T08:00:00.000Z Steam Forums Used to Deliver XMRig via ClickFix ClickFix, XMRig, Steam, cryptominer, Monero, social engineering, gaming https://0daynews.com/articles/2026-07-27-steam-forum-clickfix-xmrig-cryptominer/cover.jpg Steam Forums Used to Deliver XMRig via ClickFix https://0daynews.com/articles/2026-07-26-insurance-phishing-realtime-aitm-account-hijacking/ 0dayNews en 2026-07-26T23:00:00.000Z Insurance Phishing Moves to Real-Time Account Hijacking phishing, AiTM, adversary-in-the-middle, account takeover, insurance, MFA bypass, session hijacking https://0daynews.com/articles/2026-07-26-insurance-phishing-realtime-aitm-account-hijacking/cover.jpg Insurance Phishing Moves to Real-Time Account Hijacking https://0daynews.com/articles/2026-07-26-github-pypi-dependabot-time-based-supply-chain-defenses/ 0dayNews en 2026-07-26T14:30:00.000Z GitHub, PyPI Add Time-Gated Supply Chain Defenses supply-chain, dependabot, pypi, github, package security, dependency management, open source security https://0daynews.com/articles/2026-07-26-github-pypi-dependabot-time-based-supply-chain-defenses/cover.jpg GitHub, PyPI Add Time-Gated Supply Chain Defenses https://0daynews.com/articles/2026-07-26-chick-fil-a-credential-stuffing-13000-accounts/ 0dayNews en 2026-07-26T14:00:00.000Z Chick-fil-A: 13,000 Accounts Hit in Credential Stuffing credential stuffing, chick-fil-a, data breach, account takeover, mobile security https://0daynews.com/articles/2026-07-26-chick-fil-a-credential-stuffing-13000-accounts/cover.jpg Chick-fil-A: 13,000 Accounts Hit in Credential Stuffing https://0daynews.com/articles/2026-07-26-bluenoroff-zoom-phishing-kit-crypto-wallets/ 0dayNews en 2026-07-26T08:00:00.000Z BlueNoroff Active: Zoom Phishing Profiles Crypto Wallets BlueNoroff, North Korea, DPRK, phishing, cryptocurrency, wallet theft, ClickFix https://0daynews.com/articles/2026-07-26-bluenoroff-zoom-phishing-kit-crypto-wallets/cover.jpg BlueNoroff Active: Zoom Phishing Profiles Crypto Wallets https://0daynews.com/articles/2026-07-26-slopsquatting-ai-coding-agent-supply-chain/ 0dayNews en 2026-07-26T07:00:00.000Z Slopsquatting Has Three Names. The Attack Is the Same. slopsquatting, HalluSquatting, supply-chain, AI coding agents, package hallucination, phantom packages, software supply chain https://0daynews.com/articles/2026-07-26-slopsquatting-ai-coding-agent-supply-chain/cover.jpg Slopsquatting Has Three Names. The Attack Is the Same. https://0daynews.com/articles/2026-07-26-hermes-ai-agent-yolo-post-exploitation-thai-finance/ 0dayNews en 2026-07-26T06:00:00.000Z Open-Source AI Agent Used in Gov Post-Exploitation Attack ai-agent, hermes, post-exploitation, thailand, government, threat-intel, automation https://0daynews.com/articles/2026-07-26-hermes-ai-agent-yolo-post-exploitation-thai-finance/cover.jpg Open-Source AI Agent Used in Gov Post-Exploitation Attack https://0daynews.com/articles/2026-07-26-hotel-wifi-dns-hijack-m365-credential-theft/ 0dayNews en 2026-07-26T03:00:00.000Z Hotel Wi-Fi DNS Hijacked to Serve Fake M365 Pages dns hijacking, microsoft 365, hotel wifi, credential theft, phishing, network security https://0daynews.com/articles/2026-07-26-hotel-wifi-dns-hijack-m365-credential-theft/cover.jpg Hotel Wi-Fi DNS Hijacked to Serve Fake M365 Pages https://0daynews.com/articles/2026-07-25-steam-clickfix-xmrig-cryptominer-gamers/ 0dayNews en 2026-07-25T23:30:00.000Z Steam Forums Weaponized in ClickFix Cryptominer Campaign clickfix, xmrig, steam, cryptominer, cryptojacking, social-engineering, gaming https://0daynews.com/articles/2026-07-25-steam-clickfix-xmrig-cryptominer-gamers/cover.jpg Steam Forums Weaponized in ClickFix Cryptominer Campaign https://0daynews.com/articles/2026-07-25-bing-images-cve-2026-32194-32191-svg-system-rce/ 0dayNews en 2026-07-25T21:00:00.000Z Bing Image Workers Ran SYSTEM Commands via Crafted SVGs ImageMagick, Bing, SVG, RCE, Microsoft, XBOW, command-injection https://0daynews.com/articles/2026-07-25-bing-images-cve-2026-32194-32191-svg-system-rce/cover.jpg Bing Image Workers Ran SYSTEM Commands via Crafted SVGs https://0daynews.com/articles/2026-07-25-certighost-ad-cs-domain-controller-exploit/ 0dayNews en 2026-07-25T21:00:00.000Z Certighost: Working Exploit Reaches AD Domain Controllers Active Directory, Certighost, AD CS, DCSync, domain controller, Kerberos https://0daynews.com/articles/2026-07-25-certighost-ad-cs-domain-controller-exploit/cover.jpg Certighost: Working Exploit Reaches AD Domain Controllers https://0daynews.com/articles/2026-07-25-ctm360-aitm-insurance-phishing-real-time-mfa/ 0dayNews en 2026-07-25T17:00:00.000Z Insurance Sector Phishing Has Evolved to Real-Time AiTM phishing, AiTM, MFA bypass, account takeover, insurance, adversary-in-the-middle, session hijacking https://0daynews.com/articles/2026-07-25-ctm360-aitm-insurance-phishing-real-time-mfa/cover.jpg Insurance Sector Phishing Has Evolved to Real-Time AiTM https://0daynews.com/articles/2026-07-25-shinyhunters-breach-data-sextortion-2000-bitcoin/ 0dayNews en 2026-07-25T15:30:00.000Z ShinyHunters Breach Data Now Fueling Sextortion Emails shinyhunters, sextortion, bitcoin, data breach, extortion, email scam https://0daynews.com/articles/2026-07-25-shinyhunters-breach-data-sextortion-2000-bitcoin/cover.jpg ShinyHunters Breach Data Now Fueling Sextortion Emails https://0daynews.com/articles/2026-07-25-malvertising-javascript-in-memory-malware/ 0dayNews en 2026-07-25T15:21:09.000Z JS Malvertising Assembles Malware in Browser Memory malvertising, in-memory malware, fileless malware, JavaScript, browser security, Solana, TradingView https://0daynews.com/articles/2026-07-25-malvertising-javascript-in-memory-malware/cover.jpg JS Malvertising Assembles Malware in Browser Memory https://0daynews.com/articles/2026-07-25-fastjson-1x-cve-2026-16723-rce-no-patch/ 0dayNews en 2026-07-25T14:00:00.000Z Fastjson 1.x RCE Exploited: No Patch Available fastjson, CVE-2026-16723, RCE, Spring Boot, Java, deserialization, unauthenticated https://0daynews.com/articles/2026-07-25-fastjson-1x-cve-2026-16723-rce-no-patch/cover.jpg Fastjson 1.x RCE Exploited: No Patch Available https://0daynews.com/articles/2026-07-25-devman-raas-funky-mantis-affiliate-portal/ 0dayNews en 2026-07-25T13:05:00.000Z DevMan RaaS Offers Affiliates Centralized Build Portal ransomware, RaaS, DevMan, PRODAFT, Funky Mantis, affiliate, malware-as-a-service https://0daynews.com/articles/2026-07-25-devman-raas-funky-mantis-affiliate-portal/cover.jpg DevMan RaaS Offers Affiliates Centralized Build Portal