https://0daynews.com/articles/2026-07-25-ctm360-aitm-insurance-phishing-real-time-mfa/ 0dayNews en 2026-07-25T17:00:00.000Z Insurance Sector Phishing Has Evolved to Real-Time AiTM phishing, AiTM, MFA bypass, account takeover, insurance, adversary-in-the-middle, session hijacking https://0daynews.com/articles/2026-07-25-ctm360-aitm-insurance-phishing-real-time-mfa/cover.jpg Insurance Sector Phishing Has Evolved to Real-Time AiTM https://0daynews.com/articles/2026-07-25-shinyhunters-breach-data-sextortion-2000-bitcoin/ 0dayNews en 2026-07-25T15:30:00.000Z ShinyHunters Breach Data Now Fueling Sextortion Emails shinyhunters, sextortion, bitcoin, data breach, extortion, email scam https://0daynews.com/articles/2026-07-25-shinyhunters-breach-data-sextortion-2000-bitcoin/cover.jpg ShinyHunters Breach Data Now Fueling Sextortion Emails https://0daynews.com/articles/2026-07-25-malvertising-javascript-in-memory-malware/ 0dayNews en 2026-07-25T15:21:09.000Z JS Malvertising Assembles Malware in Browser Memory malvertising, in-memory malware, fileless malware, JavaScript, browser security, Solana, TradingView https://0daynews.com/articles/2026-07-25-malvertising-javascript-in-memory-malware/cover.jpg JS Malvertising Assembles Malware in Browser Memory https://0daynews.com/articles/2026-07-25-fastjson-1x-cve-2026-16723-rce-no-patch/ 0dayNews en 2026-07-25T14:00:00.000Z Fastjson 1.x RCE Exploited: No Patch Available fastjson, CVE-2026-16723, RCE, Spring Boot, Java, deserialization, unauthenticated https://0daynews.com/articles/2026-07-25-fastjson-1x-cve-2026-16723-rce-no-patch/cover.jpg Fastjson 1.x RCE Exploited: No Patch Available https://0daynews.com/articles/2026-07-25-devman-raas-funky-mantis-affiliate-portal/ 0dayNews en 2026-07-25T13:05:00.000Z DevMan RaaS Offers Affiliates Centralized Build Portal ransomware, RaaS, DevMan, PRODAFT, Funky Mantis, affiliate, malware-as-a-service https://0daynews.com/articles/2026-07-25-devman-raas-funky-mantis-affiliate-portal/cover.jpg DevMan RaaS Offers Affiliates Centralized Build Portal https://0daynews.com/articles/2026-07-25-gitlab-18-11-3-rce-poc-published/ 0dayNews en 2026-07-25T10:00:00.000Z GitLab RCE PoC Published: No Admin Rights Required GitLab, RCE, remote code execution, PoC, Jupyter notebook, depthfirst, self-managed GitLab https://0daynews.com/articles/2026-07-25-gitlab-18-11-3-rce-poc-published/cover.jpg GitLab RCE PoC Published: No Admin Rights Required https://0daynews.com/articles/2026-07-25-clop-targets-ptc-windchill-flexplm-data-theft/ 0dayNews en 2026-07-25T09:00:00.000Z Clop Hits Windchill and FlexPLM in Data-Theft Push Clop, PTC Windchill, FlexPLM, ransomware, data theft, extortion, PLM https://0daynews.com/articles/2026-07-25-clop-targets-ptc-windchill-flexplm-data-theft/cover.jpg Clop Hits Windchill and FlexPLM in Data-Theft Push https://0daynews.com/articles/2026-07-25-ai-agents-attacker-auditor-attack-surface/ 0dayNews en 2026-07-25T08:00:00.000Z AI Agents: Attacker, Auditor, and Attack Surface ai agents, autonomous agents, ai security, redis, nodebb, hermes, kimi k3 https://0daynews.com/articles/2026-07-25-ai-agents-attacker-auditor-attack-surface/cover.jpg AI Agents: Attacker, Auditor, and Attack Surface https://0daynews.com/articles/2026-07-25-q2-2026-cvss-epss-patching-gap-talos/ 0dayNews en 2026-07-25T05:00:00.000Z 200 CVEs a Day: Why CVSS Scores Mislead Defenders patching prioritization, CVSS, EPSS, KEV, vulnerability management, CVE growth, Q2 2026 https://0daynews.com/articles/2026-07-25-q2-2026-cvss-epss-patching-gap-talos/cover.jpg 200 CVEs a Day: Why CVSS Scores Mislead Defenders https://0daynews.com/articles/2026-07-24-microsoft-365-outage-maintenance-bug-root-cause/ 0dayNews en 2026-07-25T01:00:00.000Z M365 Outage: Automation Bug Pulled Too Many IP Routes Microsoft 365, outage, Azure, automation bug, IP routing, network maintenance, Teams outage https://0daynews.com/articles/2026-07-24-microsoft-365-outage-maintenance-bug-root-cause/cover.jpg M365 Outage: Automation Bug Pulled Too Many IP Routes https://0daynews.com/articles/2026-07-24-snapchat-hacker-illinois-76-months/ 0dayNews en 2026-07-24T23:00:00.000Z 76 Months for Hacking 750 Women's Snapchat Accounts Snapchat, account compromise, credential theft, sentencing, enforcement, intimate images, cybercrime https://0daynews.com/articles/2026-07-24-snapchat-hacker-illinois-76-months/cover.jpg 76 Months for Hacking 750 Women's Snapchat Accounts https://0daynews.com/articles/2026-07-24-chick-fil-a-credential-stuffing-13000-accounts/ 0dayNews en 2026-07-24T22:00:00.000Z Chick-fil-A Breach: Credential Stuffing Hits 13,000 Accounts credential stuffing, data breach, Chick-fil-A, account takeover, customer data, PII https://0daynews.com/articles/2026-07-24-chick-fil-a-credential-stuffing-13000-accounts/cover.jpg Chick-fil-A Breach: Credential Stuffing Hits 13,000 Accounts https://0daynews.com/articles/2026-07-24-ontrac-network-breach-customer-pii-notification/ 0dayNews en 2026-07-24T21:00:00.000Z OnTrac Confirms Network Breach, Notifies Customers ontrac, data-breach, network-hack, customer-data, pii, phishing https://0daynews.com/articles/2026-07-24-ontrac-network-breach-customer-pii-notification/cover.jpg OnTrac Confirms Network Breach, Notifies Customers https://0daynews.com/articles/2026-07-24-europol-the-com-operation-compass-4340-urls/ 0dayNews en 2026-07-24T20:30:00.000Z Europol Flags 4,340 URLs in The Com Network Crackdown The Com, Europol, Operation Compass, Cyber Com, ransomware, social engineering, law enforcement https://0daynews.com/articles/2026-07-24-europol-the-com-operation-compass-4340-urls/cover.jpg Europol Flags 4,340 URLs in The Com Network Crackdown https://0daynews.com/articles/2026-07-24-ai-agents-least-privilege-gap-kilobaud/ 0dayNews en 2026-07-24T20:00:00.000Z AI Agents Are Outrunning Their Permission Guardrails ai agents, least privilege, machine identity, agentic ai, identity security, zero trust https://0daynews.com/articles/2026-07-24-ai-agents-least-privilege-gap-kilobaud/cover.jpg AI Agents Are Outrunning Their Permission Guardrails https://0daynews.com/articles/2026-07-24-hotel-wifi-dns-hijack-microsoft-365/ 0dayNews en 2026-07-24T19:00:00.000Z Hotel Wi-Fi DNS Hijacked to Steal Microsoft 365 Accounts APT28, DNS hijacking, hotel Wi-Fi, Microsoft 365, device-code authentication, phishing, threat intel https://0daynews.com/articles/2026-07-24-hotel-wifi-dns-hijack-microsoft-365/cover.jpg Hotel Wi-Fi DNS Hijacked to Steal Microsoft 365 Accounts https://0daynews.com/articles/2026-07-24-slopsquatting-hallusquatting-ai-hallucination-supply-chain/ 0dayNews en 2026-07-24T18:05:00.000Z Slopsquatting and HalluSquatting Are the Same Problem slopsquatting, hallusquatting, AI coding agents, supply chain, package hallucination, dependency management, LLM security https://0daynews.com/articles/2026-07-24-slopsquatting-hallusquatting-ai-hallucination-supply-chain/cover.jpg Slopsquatting and HalluSquatting Are the Same Problem https://0daynews.com/articles/2026-07-24-bluenoroff-zoom-teams-crypto-wallet-phishing/ 0dayNews en 2026-07-24T17:00:00.000Z BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets BlueNoroff, Lazarus Group, phishing kit, crypto theft, ClickFix, North Korea APT, social engineering https://0daynews.com/articles/2026-07-24-bluenoroff-zoom-teams-crypto-wallet-phishing/cover.jpg BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets https://0daynews.com/articles/2026-07-24-openai-chatgpt-agentforger-phishing-workspace-agents/ 0dayNews en 2026-07-24T15:00:00.000Z OpenAI Fixes Bug That Let Phishing Forge Workspace AI Agents ChatGPT, OpenAI, AI agents, phishing, enterprise security, AgentForger, workspace security https://0daynews.com/articles/2026-07-24-openai-chatgpt-agentforger-phishing-workspace-agents/cover.jpg OpenAI Fixes Bug That Let Phishing Forge Workspace AI Agents https://0daynews.com/articles/2026-07-24-certighost-ad-dc-certificate-dcsync/ 0dayNews en 2026-07-24T14:20:00.000Z Certighost: Low-Priv AD Users Can Impersonate DCs certighost, active directory, domain controller, dcsync, krbtgt, privilege escalation, active directory certificate services https://0daynews.com/articles/2026-07-24-certighost-ad-dc-certificate-dcsync/cover.jpg Certighost: Low-Priv AD Users Can Impersonate DCs https://0daynews.com/articles/2026-07-24-bing-svg-cve-2026-32194-system-rce-xbow/ 0dayNews en 2026-07-24T14:00:00.000Z Bing SVG Flaw Ran Code as SYSTEM on Microsoft Servers Bing Images, SVG injection, CVE-2026-32194, Microsoft, XBOW, server-side processing, image processing, SYSTEM privilege https://0daynews.com/articles/2026-07-24-bing-svg-cve-2026-32194-system-rce-xbow/cover.jpg Bing SVG Flaw Ran Code as SYSTEM on Microsoft Servers https://0daynews.com/articles/2026-07-24-golden-chickens-four-new-malware-families/ 0dayNews en 2026-07-24T13:00:00.000Z Golden Chickens Resurfaces: Four New Families, Same MaaS golden-chickens, venom-spider, MaaS, TinyEgg, ChonkyChicken, malware, threat-intel https://0daynews.com/articles/2026-07-24-golden-chickens-four-new-malware-families/cover.jpg Golden Chickens Resurfaces: Four New Families, Same MaaS https://0daynews.com/articles/2026-07-24-hermes-ai-agent-thai-finance-ministry/ 0dayNews en 2026-07-24T12:00:00.000Z AI Agent Ran Unattended in Thailand's Finance Ministry Hermes AI agent, post-exploitation, autonomous agent, Thailand Finance Ministry, agentic security, threat intel https://0daynews.com/articles/2026-07-24-hermes-ai-agent-thai-finance-ministry/cover.jpg AI Agent Ran Unattended in Thailand's Finance Ministry https://0daynews.com/articles/2026-07-24-nodebb-eight-ai-found-flaws-admin-access/ 0dayNews en 2026-07-24T11:30:00.000Z NodeBB Patches Eight AI-Found High-Severity Flaws NodeBB, Aikido Security, AI pentesting, forum software, patch, high severity, admin access https://0daynews.com/articles/2026-07-24-nodebb-eight-ai-found-flaws-admin-access/cover.jpg NodeBB Patches Eight AI-Found High-Severity Flaws https://0daynews.com/articles/2026-07-24-kimi-k3-redis-zero-days-rce-patches/ 0dayNews en 2026-07-24T10:00:00.000Z AI Agents Uncover Redis Zero-Days, Seven Patches Ship Redis, zero-day, RCE, AI security research, memory safety, open source, patch https://0daynews.com/articles/2026-07-24-kimi-k3-redis-zero-days-rce-patches/cover.jpg AI Agents Uncover Redis Zero-Days, Seven Patches Ship https://0daynews.com/articles/2026-07-24-clop-windchill-flexplm-cve-2026-12569-data-theft/ 0dayNews en 2026-07-24T09:00:00.000Z Clop Data Theft Campaign Hits PTC Windchill, FlexPLM Clop, PTC Windchill, FlexPLM, CVE-2026-12569, ransomware, data theft, extortion https://0daynews.com/articles/2026-07-24-clop-windchill-flexplm-cve-2026-12569-data-theft/cover.jpg Clop Data Theft Campaign Hits PTC Windchill, FlexPLM https://0daynews.com/articles/2026-07-24-uac-0099-matchboil-v2-notepad-plugin-fuse/ 0dayNews en 2026-07-24T08:00:00.000Z Russia-Linked UAC-0099 Behind Notepad++ Malware Push UAC-0099, MATCHBOIL.V2, Notepad++, CERT-UA, Russia APT, malware https://0daynews.com/articles/2026-07-24-uac-0099-matchboil-v2-notepad-plugin-fuse/cover.jpg Russia-Linked UAC-0099 Behind Notepad++ Malware Push https://0daynews.com/articles/2026-07-24-microsoft-365-outage-teams-sharepoint-admin-center/ 0dayNews en 2026-07-24T07:00:00.000Z M365 Outage Drops Teams, SharePoint, Admin Center Microsoft 365, outage, Teams, SharePoint, M365 Admin Center, security operations, service disruption https://0daynews.com/articles/2026-07-24-microsoft-365-outage-teams-sharepoint-admin-center/cover.jpg M365 Outage Drops Teams, SharePoint, Admin Center https://0daynews.com/articles/2026-07-23-synthetic-identity-fraud-machine-credentials/ 0dayNews en 2026-07-24T01:05:00.000Z Synthetic Identity Fraud Comes for Machine Credentials synthetic-identity, machine-identity, API-keys, service-accounts, identity-fraud, IAM, cloud-security https://0daynews.com/articles/2026-07-23-synthetic-identity-fraud-machine-credentials/cover.jpg Synthetic Identity Fraud Comes for Machine Credentials https://0daynews.com/articles/2026-07-23-ai-both-weapon-and-attack-surface/ 0dayNews en 2026-07-23T23:58:00.000Z AI Is Now Both Attack Tool and Attack Surface AI security, threat intelligence, Dolphin X RAT, SectopRAT, sandbox escape, AI agent, malware https://0daynews.com/articles/2026-07-23-ai-both-weapon-and-attack-surface/cover.jpg AI Is Now Both Attack Tool and Attack Surface https://0daynews.com/articles/2026-07-23-confluence-cve-2023-22515-three-years-kilobaud/ 0dayNews en 2026-07-23T23:00:00.000Z CVE-2023-22515: Three Years of Confluence Exploitation Atlassian, Confluence, CVE-2023-22515, broken access control, EPSS, KEV, patch management, ransomware precursor https://0daynews.com/articles/2026-07-23-confluence-cve-2023-22515-three-years-kilobaud/cover.jpg CVE-2023-22515: Three Years of Confluence Exploitation https://0daynews.com/articles/2026-07-23-dolphin-x-rat-ai-victim-profiling/ 0dayNews en 2026-07-23T22:00:00.000Z Dolphin X RAT Uses AI to Score High-Value Targets dolphin-x, RAT, remote-access-trojan, AI-profiling, malware, threat-intel, victim-targeting https://0daynews.com/articles/2026-07-23-dolphin-x-rat-ai-victim-profiling/cover.jpg Dolphin X RAT Uses AI to Score High-Value Targets https://0daynews.com/articles/2026-07-23-fake-claude-sectoprat-bing-malvertising-loop/ 0dayNews en 2026-07-23T22:00:00.000Z Fake Claude Installer in Bing Ads Drops SectopRAT malvertising, SectopRAT, ArechClient2, Bing ads, Claude, RAT, infostealer https://0daynews.com/articles/2026-07-23-fake-claude-sectoprat-bing-malvertising-loop/cover.jpg Fake Claude Installer in Bing Ads Drops SectopRAT https://0daynews.com/articles/2026-07-23-openai-huggingface-eval-production-kilobaud/ 0dayNews en 2026-07-23T22:00:00.000Z OpenAI Eval Reached HuggingFace Production AI security, agentic AI, OpenAI, HuggingFace, model evaluation, AI containment, frontier AI https://0daynews.com/articles/2026-07-23-openai-huggingface-eval-production-kilobaud/cover.jpg OpenAI Eval Reached HuggingFace Production https://0daynews.com/articles/2026-07-23-origin-energy-data-breach-pii-exposed/ 0dayNews en 2026-07-23T21:00:00.000Z Origin Energy Confirms Customer Data Breach Origin Energy, data breach, PII, Australia, energy sector, customer data https://0daynews.com/articles/2026-07-23-origin-energy-data-breach-pii-exposed/cover.jpg Origin Energy Confirms Customer Data Breach https://0daynews.com/articles/2026-07-23-talos-q2-2026-dont-swing-patch-prioritization/ 0dayNews en 2026-07-23T20:00:00.000Z Q2 2026 Vuln Stats: You Can't Patch Everything patch-management, vulnerability-prioritization, EPSS, KEV, Talos, CVE-statistics, threat-intelligence https://0daynews.com/articles/2026-07-23-talos-q2-2026-dont-swing-patch-prioritization/cover.jpg Q2 2026 Vuln Stats: You Can't Patch Everything https://0daynews.com/articles/2026-07-23-lunchpoke-certua-notepad-plugin-persistence-fuse/ 0dayNews en 2026-07-23T19:00:00.000Z CERT-UA: LunchPoke Malware Hides in Notepad++ Plugin Notepad++, LunchPoke, CERT-UA, malware, persistence, plugin, Ukraine https://0daynews.com/articles/2026-07-23-lunchpoke-certua-notepad-plugin-persistence-fuse/cover.jpg CERT-UA: LunchPoke Malware Hides in Notepad++ Plugin