https://0daynews.com/articles/2026-08-18-twinloot-sharepoint-teams-c2-python-implant/ 0dayNews en 2026-08-18T14:00:00.000Z TWINLOOT Hides C2 Inside Microsoft SharePoint TWINLOOT, Python malware, SharePoint C2, living-off-the-cloud, credential theft, LOLBin, Microsoft 365 https://0daynews.com/articles/2026-08-18-twinloot-sharepoint-teams-c2-python-implant/cover.jpg TWINLOOT Hides C2 Inside Microsoft SharePoint https://0daynews.com/articles/2026-08-18-anthropic-claude-agents-self-replicating-malware/ 0dayNews en 2026-08-18T12:00:00.000Z Anthropic: Claude Agents Deployed Self-Replicating Malware AI agents, multi-agent systems, self-replicating malware, Anthropic, Claude, AI security, agentic AI https://0daynews.com/articles/2026-08-18-anthropic-claude-agents-self-replicating-malware/cover.jpg Anthropic: Claude Agents Deployed Self-Replicating Malware https://0daynews.com/articles/2026-08-18-windows-task-host-ransomware-cisa-kev/ 0dayNews en 2026-08-18T12:00:00.000Z CISA: Ransomware Gangs Now Exploit Windows Task Host Flaw Windows, Task Host, CISA, KEV, ransomware, Microsoft, vulnerability https://0daynews.com/articles/2026-08-18-windows-task-host-ransomware-cisa-kev/cover.jpg CISA: Ransomware Gangs Now Exploit Windows Task Host Flaw https://0daynews.com/articles/2026-08-18-microsoft-wmic-removed-windows11-lolbin/ 0dayNews en 2026-08-18T08:12:00.000Z Microsoft Removes WMIC LOLBin From Windows 11 WMIC, LOLBin, Windows 11, Windows Management Instrumentation, detection engineering, threat hunting, living off the land https://0daynews.com/articles/2026-08-18-microsoft-wmic-removed-windows11-lolbin/cover.jpg Microsoft Removes WMIC LOLBin From Windows 11 https://0daynews.com/articles/2026-08-18-forminator-wordpress-cve-2026-15748-rce/ 0dayNews en 2026-08-18T08:00:00.000Z Forminator WordPress Plugin RCE Flaw Hits 600K Sites wordpress, forminator, CVE-2026-15748, RCE, file upload, critical, plugin https://0daynews.com/articles/2026-08-18-forminator-wordpress-cve-2026-15748-rce/cover.jpg Forminator WordPress Plugin RCE Flaw Hits 600K Sites https://0daynews.com/articles/2026-08-17-snowflake-github-actions-workflow-injection/ 0dayNews en 2026-08-17T22:15:00.000Z GitHub Actions Injection Found in Snowflake .NET Repo github-actions, workflow-injection, supply-chain, snowflake, ci-cd, credential-exposure, wiz https://0daynews.com/articles/2026-08-17-snowflake-github-actions-workflow-injection/cover.jpg GitHub Actions Injection Found in Snowflake .NET Repo https://0daynews.com/articles/2026-08-17-gitlab-cve-2026-19478-graphql-unauth/ 0dayNews en 2026-08-17T22:00:00.000Z Critical GitLab Flaw Lets Attackers Delete Projects gitlab, CVE-2026-19478, graphql, unauthenticated, critical, patch, community-edition, enterprise-edition https://0daynews.com/articles/2026-08-17-gitlab-cve-2026-19478-graphql-unauth/cover.jpg Critical GitLab Flaw Lets Attackers Delete Projects https://0daynews.com/articles/2026-08-17-apple-ios-macos-108-vulnerabilities-patched/ 0dayNews en 2026-08-17T21:30:00.000Z Apple Patches 108 Flaws in iOS, iPadOS and macOS 26 apple, ios, ipad, macos, security update, patch, vulnerabilities https://0daynews.com/articles/2026-08-17-apple-ios-macos-108-vulnerabilities-patched/cover.jpg Apple Patches 108 Flaws in iOS, iPadOS and macOS 26 https://0daynews.com/articles/2026-08-17-discourse-cve-2026-55674-csp-bypass/ 0dayNews en 2026-08-17T20:00:00.000Z Discourse: Critical CSP Bypass Fixed, Three More CVEs discourse, cve-2026-55674, html-injection, csp-bypass, content-security-policy, information-disclosure, patch https://0daynews.com/articles/2026-08-17-discourse-cve-2026-55674-csp-bypass/cover.jpg Discourse: Critical CSP Bypass Fixed, Three More CVEs https://0daynews.com/articles/2026-08-17-how-cvss-scoring-works/ 0dayNews en 2026-08-17T19:00:00.000Z How CVSS Scoring Works cvss, cvss-3-1, vulnerability-scoring, cvss-base-score, epss, patch-prioritization, nvd https://0daynews.com/articles/2026-08-17-how-cvss-scoring-works/cover.jpg How CVSS Scoring Works https://0daynews.com/articles/2026-08-17-what-is-cisa-kev-catalog/ 0dayNews en 2026-08-17T18:30:00.000Z What Is the CISA KEV Catalog? cisa-kev, known-exploited-vulnerabilities, vulnerability-management, bod-22-01, patch-prioritization, cisa, epss https://0daynews.com/articles/2026-08-17-what-is-cisa-kev-catalog/cover.jpg What Is the CISA KEV Catalog? https://0daynews.com/articles/2026-08-17-ray-framework-cve-2025-62593-cisa-kev/ 0dayNews en 2026-08-17T16:00:00.000Z Ray AI Framework Added to CISA KEV — Patch by Aug 21 ray-project, cve-2025-62593, cisa-kev, remote-code-execution, machine-learning, patch https://0daynews.com/articles/2026-08-17-ray-framework-cve-2025-62593-cisa-kev/cover.jpg Ray AI Framework Added to CISA KEV — Patch by Aug 21 https://0daynews.com/articles/2026-08-17-clop-ransomware-ge-philips-data-theft/ 0dayNews en 2026-08-17T14:00:00.000Z Clop Claims GE and Philips; Both Investigating clop, ransomware, general electric, philips, data theft, breach investigation, extortion https://0daynews.com/articles/2026-08-17-clop-ransomware-ge-philips-data-theft/cover.jpg Clop Claims GE and Philips; Both Investigating https://0daynews.com/articles/2026-08-17-shieldbreak-defender-patch-update/ 0dayNews en 2026-08-17T10:00:00.000Z Microsoft Patch Underway for Defender ShieldBreak Zero-Day shieldbreak, CVE-2026-69414, microsoft defender, zero-day, elevation of privilege, windows, malware protection engine https://0daynews.com/articles/2026-08-17-shieldbreak-defender-patch-update/cover.jpg Microsoft Patch Underway for Defender ShieldBreak Zero-Day https://0daynews.com/articles/2026-08-17-fortune-500-azure-data-theft-campaign/ 0dayNews en 2026-08-17T07:30:00.000Z Fortune 500 Firms Named in Azure Data Theft Claim azure, data breach, fortune 500, cloud security, threat actor, data theft, exfiltration https://0daynews.com/articles/2026-08-17-fortune-500-azure-data-theft-campaign/cover.jpg Fortune 500 Firms Named in Azure Data Theft Claim https://0daynews.com/articles/2026-08-17-gl-inet-490-rce-flaws-routers/ 0dayNews en 2026-08-17T06:00:00.000Z GL.iNet 4.9.0 Fixes Five RCE Flaws in Wi-Fi Routers GL.iNet, router, remote-code-execution, firmware, CVE-2026-19979, CVE-2026-19983, patch https://0daynews.com/articles/2026-08-17-gl-inet-490-rce-flaws-routers/cover.jpg GL.iNet 4.9.0 Fixes Five RCE Flaws in Wi-Fi Routers https://0daynews.com/articles/2026-08-17-wireshark-468-28-vulnerabilities-patched/ 0dayNews en 2026-08-17T05:00:00.000Z Wireshark 4.6.8 Patches 28 Vulnerabilities wireshark, packet-capture, protocol-analyzer, vulnerability, patch, security-update https://0daynews.com/articles/2026-08-17-wireshark-468-28-vulnerabilities-patched/cover.jpg Wireshark 4.6.8 Patches 28 Vulnerabilities https://0daynews.com/articles/2026-08-17-safepal-breach-40k-customers-data-for-sale/ 0dayNews en 2026-08-17T02:00:00.000Z SafePal Breach: 39,798 Customers' Order Data for Sale SafePal, data breach, cryptocurrency, hardware wallet, customer data, threat actor https://0daynews.com/articles/2026-08-17-safepal-breach-40k-customers-data-for-sale/cover.jpg SafePal Breach: 39,798 Customers' Order Data for Sale https://0daynews.com/articles/2026-08-16-amnesiastealer-macos-browser-hijack/ 0dayNews en 2026-08-16T23:45:00.000Z AmnesiaStealer Hijacks macOS Browser Sessions AmnesiaStealer, macOS malware, ClickFix, infostealer, browser hijacking, Jamf, keychain https://0daynews.com/articles/2026-08-16-amnesiastealer-macos-browser-hijack/cover.jpg AmnesiaStealer Hijacks macOS Browser Sessions https://0daynews.com/articles/2026-08-16-wordpress-pods-link-library-critical-vulns/ 0dayNews en 2026-08-16T22:00:00.000Z Critical Flaws in Pods, Link Library Hit WordPress Sites wordpress, CVE-2026-19598, CVE-2026-18855, privilege-escalation, arbitrary-file-deletion, pods, link-library https://0daynews.com/articles/2026-08-16-wordpress-pods-link-library-critical-vulns/cover.jpg Critical Flaws in Pods, Link Library Hit WordPress Sites https://0daynews.com/articles/2026-08-16-siyuan-v374-eleven-cves-critical-rce/ 0dayNews en 2026-08-16T20:00:00.000Z SiYuan v3.7.4 Patches 11 CVEs, Critical RCE Confirmed siyuan, rce, electron, xss, auth-bypass, cve, note-taking https://0daynews.com/articles/2026-08-16-siyuan-v374-eleven-cves-critical-rce/cover.jpg SiYuan v3.7.4 Patches 11 CVEs, Critical RCE Confirmed https://0daynews.com/articles/2026-08-16-threema-ddos-service-disruption/ 0dayNews en 2026-08-16T17:30:00.000Z Threema Hit by Large-Scale DDoS, Service Disrupted DDoS, Threema, secure messaging, availability, disruption https://0daynews.com/articles/2026-08-16-threema-ddos-service-disruption/cover.jpg Threema Hit by Large-Scale DDoS, Service Disrupted https://0daynews.com/articles/2026-08-16-august-kernel-drop-enterprise-cves/ 0dayNews en 2026-08-16T16:00:00.000Z August Kernel Drop: The Enterprise CVEs Nobody Wrote About linux kernel, thunderbolt, nvme-of, tpm, heap overflow, enterprise security, stable kernel https://0daynews.com/articles/2026-08-16-august-kernel-drop-enterprise-cves/cover.jpg August Kernel Drop: The Enterprise CVEs Nobody Wrote About