https://0daynews.com/articles/2026-07-08-sophos-coding-agents-tripping-edr-attacker-detections/ 0dayNews en 2026-07-08T19:20:00.000Z Sophos: Coding Agents Are Tripping the Attacker Detections Sophos, EDR, Claude Code, Cursor, OpenAI Codex, credential access, LOLBins https://0daynews.com/articles/2026-07-08-sophos-coding-agents-tripping-edr-attacker-detections/cover.jpg Sophos: Coding Agents Are Tripping the Attacker Detections https://0daynews.com/articles/2026-07-08-pink-o-unc-066-entra-passkey-vishing-okta-unit42/ 0dayNews en 2026-07-08T18:05:00.000Z Pink Vishing Enrolls Rogue Entra Passkeys on M365 Tenants Entra, Microsoft 365, passkey, vishing, O-UNC-066, Pink, The Com, Okta, Unit 42 https://0daynews.com/articles/2026-07-08-hallusquatting-npm-ai-hallucinated-packages-tel-aviv/ 0dayNews en 2026-07-08T17:20:00.000Z HalluSquatting weaponizes AI-hallucinated npm packages hallusquatting, supply-chain, npm, ai-coding-assistants, package-typosquatting, tel-aviv-university https://0daynews.com/articles/2026-07-08-hallusquatting-npm-ai-hallucinated-packages-tel-aviv/cover.jpg HalluSquatting weaponizes AI-hallucinated npm packages https://0daynews.com/articles/2026-07-08-copilot-workflow-jailbreak-arxiv-kumar-maple/ 0dayNews en 2026-07-08T16:20:00.000Z Refused in Chat, Written in Code: Copilot's Workflow Gap GitHub Copilot, AI safety, coding assistants, Claude, Gemini, jailbreak, prompt injection https://0daynews.com/articles/2026-07-08-copilot-workflow-jailbreak-arxiv-kumar-maple/cover.jpg Refused in Chat, Written in Code: Copilot's Workflow Gap https://0daynews.com/articles/2026-07-08-scmbanker-elastic-ref6045-mexican-banking-fraud/ 0dayNews en 2026-07-08T15:15:00.000Z SCMBANKER active against Mexican banks — Elastic REF6045 SCMBANKER, REF6045, ClickFix, Mexican banking fraud, Elastic Security Labs, banking malware https://0daynews.com/articles/2026-07-08-github-verified-commit-hash-malleability-ginesin/ 0dayNews en 2026-07-08T14:15:00.000Z A signed Git commit's hash is not a unique fingerprint git, github, verified commits, supply chain, signature malleability, code signing, provenance https://0daynews.com/articles/2026-07-08-kddi-japan-isp-breach-12m-third-party-zero-day/ 0dayNews en 2026-07-08T13:15:00.000Z KDDI Breach: 12M Emails, 7.6M Passwords via 3rd-Party 0day KDDI, Japan ISP breach, zero-day, credential exposure, BIGLOBE, NIFTY https://0daynews.com/articles/2026-07-08-kddi-japan-isp-breach-12m-third-party-zero-day/cover.jpg KDDI Breach: 12M Emails, 7.6M Passwords via 3rd-Party 0day https://0daynews.com/articles/2026-07-08-gitlost-github-agentic-workflows-noma-security-private-repos/ 0dayNews en 2026-07-08T11:15:00.000Z GitLost: Public Issue Leaks Private GitHub Repo Data GitLost, Noma Security, GitHub Agentic Workflows, indirect prompt injection, AI agent security, private repo leak, Sasi Levi https://0daynews.com/articles/2026-07-08-cisa-coldfusion-cve-2026-48282-kev-friday-deadline/ 0dayNews en 2026-07-08T11:00:00.000Z CISA: Patch ColdFusion CVE-2026-48282 by Friday Adobe ColdFusion, CVE-2026-48282, CISA KEV, BOD 26-04, active exploitation, APSB26-68 https://0daynews.com/articles/2026-07-08-cisa-coldfusion-cve-2026-48282-kev-friday-deadline/cover.jpg CISA: Patch ColdFusion CVE-2026-48282 by Friday https://0daynews.com/articles/2026-07-08-ubiquiti-unifi-connect-command-injection-cve-2026-50746/ 0dayNews en 2026-07-08T09:00:00.000Z Ubiquiti Patches Max-Severity UniFi Connect Command Injection Ubiquiti, UniFi Connect, UniFi OS, CVE-2026-50746, command injection, network appliance, vendor advisory https://0daynews.com/articles/2026-07-08-dialogflow-cx-rogue-agent-shared-exec-varonis/ 0dayNews en 2026-07-08T08:15:00.000Z Dialogflow's Rogue Agent Flaw Is a Very Old Bug Class Google Dialogflow, Dialogflow CX, Varonis, Rogue Agent, chatbot security, LLM security, shared runtime https://0daynews.com/articles/2026-07-08-ghostlock-linux-kernel-cve-2026-43499-container-escape/ 0dayNews en 2026-07-08T07:15:00.000Z GhostLock: 15-Year Linux Kernel Root/Container Escape CVE-2026-43499, GhostLock, Linux kernel, futex, use-after-free, container escape, Nebula Security https://0daynews.com/articles/2026-07-08-debull-m365-device-code-phishing-storm-2372-overlap/ 0dayNews en 2026-07-08T06:20:00.000Z DEBULL Kit Runs M365 Device-Code Phishing, Storm-2372 DEBULL, Storm-2372, device code phishing, Microsoft 365, Entra Conditional Access, ZeroBEC, phishing-as-a-service https://0daynews.com/articles/2026-07-08-cisa-kev-langflow-joomla-page-builder-adds/ 0dayNews en 2026-07-08T05:20:00.000Z CISA Adds Langflow and Two Joomla Builders to KEV CISA KEV, CVE-2026-55255, CVE-2026-56290, CVE-2026-48908, Langflow, Joomla, patch priority https://0daynews.com/articles/2026-07-08-unk-masstraction-china-cluster-roundcube-universities/ 0dayNews en 2026-07-08T04:15:00.000Z Proofpoint: China cluster raids university physics mail Roundcube, UNK_MassTraction, UNC5174, Proofpoint, university targeting, academic espionage, CVE-2024-42009, CVE-2025-49113 https://0daynews.com/articles/2026-07-08-unk-masstraction-china-cluster-roundcube-universities/cover.jpg Proofpoint: China cluster raids university physics mail https://0daynews.com/articles/2026-07-07-uat-7810-longleash-orb-network-ruckus-asus/ 0dayNews en 2026-07-08T03:15:00.000Z China-Linked UAT-7810 Expands ORB Net With LONGLEASH UAT-7810, LONGLEASH, ORB network, Ruckus, ASUS, Cisco Talos, China APT https://0daynews.com/articles/2026-07-07-uat-7810-longleash-orb-network-ruckus-asus/cover.jpg China-Linked UAT-7810 Expands ORB Net With LONGLEASH https://0daynews.com/articles/2026-07-08-scattered-spider-windows-device-id-court-filing-stokes/ 0dayNews en 2026-07-08T02:20:00.000Z Windows Device ID trail led FBI to Scattered Spider suspect Scattered Spider, Peter Stokes, Windows Device ID, FBI attribution, court filing, OPSEC https://0daynews.com/articles/2026-07-08-scattered-spider-windows-device-id-court-filing-stokes/cover.jpg Windows Device ID trail led FBI to Scattered Spider suspect https://0daynews.com/articles/2026-07-07-tenda-router-backdoor-cve-2026-11405-unpatched/ 0dayNews en 2026-07-08T01:15:00.000Z Tenda Router Backdoor Has No Patch. Here's What to Do. CVE-2026-11405, Tenda, router backdoor, CERT/CC, embedded firmware, unpatched, SOHO router https://0daynews.com/articles/2026-07-07-tenda-router-backdoor-cve-2026-11405-unpatched/cover.jpg Tenda Router Backdoor Has No Patch. Here's What to Do. https://0daynews.com/articles/2026-07-07-accenture-confirms-breach-source-code-claim/ 0dayNews en 2026-07-08T00:20:00.000Z Accenture Confirms Breach; Attacker Claims 35 GB Stolen Accenture, breach, source code, data leak, IT services https://0daynews.com/articles/2026-07-07-accenture-confirms-breach-source-code-claim/cover.jpg Accenture Confirms Breach; Attacker Claims 35 GB Stolen https://0daynews.com/articles/2026-07-07-januscape-cve-2026-53359-kvm-guest-host-escape/ 0dayNews en 2026-07-07T23:20:00.000Z Januscape (CVE-2026-53359): 16-year KVM guest-to-host escape CVE-2026-53359, Januscape, Linux kernel, KVM, shadow MMU, virtualization, kvmCTF https://0daynews.com/articles/2026-07-07-januscape-cve-2026-53359-kvm-guest-host-escape/cover.jpg Januscape (CVE-2026-53359): 16-year KVM guest-to-host escape https://0daynews.com/articles/2026-07-07-beyondtrust-remote-support-pra-auth-bypass/ 0dayNews en 2026-07-07T22:15:00.000Z BeyondTrust Patches Four RS/PRA Flaws — Patch Now CVE-2026-40138, CVE-2026-40139, CVE-2026-40140, CVE-2026-40141, BeyondTrust Remote Support, Privileged Remote Access, pre-auth auth bypass, vendor advisory https://0daynews.com/articles/2026-07-07-beyondtrust-remote-support-pra-auth-bypass/cover.jpg BeyondTrust Patches Four RS/PRA Flaws — Patch Now