https://0daynews.com/articles/2026-07-22-check-point-smartconsole-cve-2026-16232-kev-admin-bypass/ 0dayNews en 2026-07-22T22:00:00.000Z Check Point SmartConsole Flaw Gives Attackers Admin Access Check Point, SmartConsole, CVE-2026-16232, CISA KEV, authentication bypass, firewall management https://0daynews.com/articles/2026-07-22-check-point-smartconsole-cve-2026-16232-kev-admin-bypass/cover.jpg Check Point SmartConsole Flaw Gives Attackers Admin Access https://0daynews.com/articles/2026-07-22-upbound-acima-13m-lease-fraud-breach/ 0dayNews en 2026-07-22T22:00:00.000Z Stolen Upbound Data Fueled $13M Acima Lease Fraud Upbound, Acima, data breach, lease fraud, fintech, identity fraud https://0daynews.com/articles/2026-07-22-upbound-acima-13m-lease-fraud-breach/cover.jpg Stolen Upbound Data Fueled $13M Acima Lease Fraud https://0daynews.com/articles/2026-07-22-south-korea-mfa-diplomatic-academy-breach-airgap/ 0dayNews en 2026-07-22T21:00:00.000Z South Korea MFA Breach: Diplomat Data Exposed 10 Months South Korea, MFA breach, diplomatic data, National Diplomatic Academy, data breach, espionage https://0daynews.com/articles/2026-07-22-south-korea-mfa-diplomatic-academy-breach-airgap/cover.jpg South Korea MFA Breach: Diplomat Data Exposed 10 Months https://0daynews.com/articles/2026-07-22-snap-confine-lpe-ubuntu-desktop-root-fuse/ 0dayNews en 2026-07-22T20:00:00.000Z snap-confine LPE Hits Default Ubuntu Desktop Installs CVE-2026-8933, snap-confine, Ubuntu, privilege escalation, LPE, local root https://0daynews.com/articles/2026-07-22-snap-confine-lpe-ubuntu-desktop-root-fuse/cover.jpg snap-confine LPE Hits Default Ubuntu Desktop Installs https://0daynews.com/articles/2026-07-22-adobe-acrobat-chrome-extension-whatsapp-web-data-access/ 0dayNews en 2026-07-22T17:30:00.000Z Adobe Acrobat Extension Let Sites Read WhatsApp Chats adobe acrobat, chrome extension, whatsapp, browser security, privacy, extension permissions https://0daynews.com/articles/2026-07-22-adobe-acrobat-chrome-extension-whatsapp-web-data-access/cover.jpg Adobe Acrobat Extension Let Sites Read WhatsApp Chats https://0daynews.com/articles/2026-07-22-stadler-rail-everest-ransom-rejected/ 0dayNews en 2026-07-22T17:30:00.000Z Stadler Rail Refuses $12.3M Ransom from Everest stadler rail, everest ransomware, ransomware, third-party risk, supply chain, switzerland, data extortion https://0daynews.com/articles/2026-07-22-stadler-rail-everest-ransom-rejected/cover.jpg Stadler Rail Refuses $12.3M Ransom from Everest https://0daynews.com/articles/2026-07-22-microsoft-exchange-2016-2019-esu-ends-october/ 0dayNews en 2026-07-22T16:00:00.000Z Exchange 2016 and 2019 Lose ESU Patches in October Exchange 2016, Exchange 2019, ESU, end of support, Microsoft, patch management, migration https://0daynews.com/articles/2026-07-22-microsoft-exchange-2016-2019-esu-ends-october/cover.jpg Exchange 2016 and 2019 Lose ESU Patches in October https://0daynews.com/articles/2026-07-22-ostium-23-7m-off-chain-oracle-compromise-airgap/ 0dayNews en 2026-07-22T15:45:00.000Z Ostium Loses $23.7M to Off-Chain Oracle Compromise Ostium, oracle compromise, price manipulation, off-chain infrastructure, DeFi, crypto breach, liquidity provider https://0daynews.com/articles/2026-07-22-ostium-23-7m-off-chain-oracle-compromise-airgap/cover.jpg Ostium Loses $23.7M to Off-Chain Oracle Compromise https://0daynews.com/articles/2026-07-22-windmill-cve-2026-29059-path-traversal-active-exploitation/ 0dayNews en 2026-07-22T15:00:00.000Z CVE-2026-29059: Windmill Path Traversal Actively Exploited CVE-2026-29059, Windmill, path traversal, active exploitation, VulnCheck, arbitrary file read, developer platform https://0daynews.com/articles/2026-07-22-windmill-cve-2026-29059-path-traversal-active-exploitation/cover.jpg CVE-2026-29059: Windmill Path Traversal Actively Exploited https://0daynews.com/articles/2026-07-22-langflow-cve-2026-0770-fifth-kev-entry-federal-friday/ 0dayNews en 2026-07-22T13:20:00.000Z Langflow's fifth KEV entry: CVE-2026-0770, patch by Friday CVE-2026-0770, Langflow, CISA KEV, Zero Day Initiative, Trend Research, unauthenticated RCE, BOD 26-04 https://0daynews.com/articles/2026-07-22-langflow-cve-2026-0770-fifth-kev-entry-federal-friday/cover.jpg Langflow's fifth KEV entry: CVE-2026-0770, patch by Friday https://0daynews.com/articles/2026-07-22-lg-webos-residential-proxy-sdk-ban-spur-brightdata-42-percent/ 0dayNews en 2026-07-22T10:00:00.000Z LG bans residential-proxy SDKs from webOS TV apps LG, webOS, residential proxies, Bright Data, Spur, smart TV, Samsung Tizen https://0daynews.com/articles/2026-07-22-lg-webos-residential-proxy-sdk-ban-spur-brightdata-42-percent/cover.jpg LG bans residential-proxy SDKs from webOS TV apps https://0daynews.com/articles/2026-07-22-azure-devops-mcp-manifold-hidden-pr-comments-hijack-ai-reviewers-fuse/ 0dayNews en 2026-07-22T09:15:00.000Z Azure DevOps MCP: hidden PR text hijacks AI reviewers Azure DevOps MCP, prompt injection, Manifold Security, Microsoft, AI coding agent, indirect prompt injection https://0daynews.com/articles/2026-07-22-azure-devops-mcp-manifold-hidden-pr-comments-hijack-ai-reviewers-fuse/cover.jpg Azure DevOps MCP: hidden PR text hijacks AI reviewers https://0daynews.com/articles/2026-07-22-chick-fil-a-june-credential-stuffing-2182-texans-airgap/ 0dayNews en 2026-07-22T08:00:00.000Z Chick-fil-A discloses June credential-stuffing breach Chick-fil-A, credential stuffing, data breach, loyalty program, password reuse, Chick-fil-A One https://0daynews.com/articles/2026-07-22-chick-fil-a-june-credential-stuffing-2182-texans-airgap/cover.jpg Chick-fil-A discloses June credential-stuffing breach https://0daynews.com/articles/2026-07-22-jfrog-nuget-newtonsoftt-typosquat-digitain-fg-crash-kilobaud/ 0dayNews en 2026-07-22T07:00:00.000Z A NuGet Typosquat That Rigged Games Instead of Wallets supply-chain, nuget, typosquat, newtonsoft-json, jfrog, digitain, dotnet https://0daynews.com/articles/2026-07-22-jfrog-nuget-newtonsoftt-typosquat-digitain-fg-crash-kilobaud/cover.jpg A NuGet Typosquat That Rigged Games Instead of Wallets https://0daynews.com/articles/2026-07-22-openai-attributes-hugging-face-breach-gpt-5-6-sol-exploitgym/ 0dayNews en 2026-07-22T06:15:00.000Z OpenAI attributes Hugging Face breach to GPT-5.6 Sol Hugging Face, OpenAI, GPT-5.6 Sol, ExploitGym, autonomous agent, AI safety, package registry https://0daynews.com/articles/2026-07-22-openai-attributes-hugging-face-breach-gpt-5-6-sol-exploitgym/cover.jpg OpenAI attributes Hugging Face breach to GPT-5.6 Sol https://0daynews.com/articles/2026-07-21-cisa-kev-wp2shell-both-cves-added-bod-26-04-federal-clock/ 0dayNews en 2026-07-22T03:00:00.000Z Both wp2shell CVEs land on CISA KEV — federal clock runs CISA KEV, wp2shell, CVE-2026-63030, CVE-2026-60137, WordPress, BOD 26-04 https://0daynews.com/articles/2026-07-21-cisa-kev-wp2shell-both-cves-added-bod-26-04-federal-clock/cover.jpg Both wp2shell CVEs land on CISA KEV — federal clock runs https://0daynews.com/articles/2026-07-21-zimbra-10-1-20-nine-bugs-snmp-command-injection-tops-list/ 0dayNews en 2026-07-21T23:45:00.000Z Zimbra 10.1.20 patches nine, SNMP injection at the top Zimbra, Zimbra Collaboration Suite, Zimbra 10.1.20, SNMP command injection, Classic Web Client XSS, Nextcloud SSRF, patch release https://0daynews.com/articles/2026-07-21-zimbra-10-1-20-nine-bugs-snmp-command-injection-tops-list/cover.jpg Zimbra 10.1.20 patches nine, SNMP injection at the top https://0daynews.com/articles/2026-07-21-kratos-phaas-olympus-blade-takedown-m365-passkeys-fuse/ 0dayNews en 2026-07-21T23:30:00.000Z Kratos phishing platform seized. M365 exposure is not. Kratos PhaaS, phishing-as-a-service, Operation Olympus Blade, Microsoft 365, AiTM, passkeys, phishing-resistant MFA https://0daynews.com/articles/2026-07-21-kratos-phaas-olympus-blade-takedown-m365-passkeys-fuse/cover.jpg Kratos phishing platform seized. M365 exposure is not. https://0daynews.com/articles/2026-07-21-sharepoint-cve-2026-50522-machine-keys-stolen-rotate-credentials-fuse/ 0dayNews en 2026-07-21T22:05:00.000Z SharePoint attackers stealing keys — rotate credentials now CVE-2026-50522, Microsoft SharePoint, machine keys, watchTowr, Defused, credential rotation, persistence https://0daynews.com/articles/2026-07-21-sharepoint-cve-2026-50522-machine-keys-stolen-rotate-credentials-fuse/cover.jpg SharePoint attackers stealing keys — rotate credentials now https://0daynews.com/articles/2026-07-21-thn-picus-n-hour-patching-mythos-verizon-dbir-analysis/ 0dayNews en 2026-07-21T21:15:00.000Z Patch-to-exploit is hours. Patching still isn't optional. N-day, patch race, Mythos, Verizon DBIR, exposure validation, control effectiveness https://0daynews.com/articles/2026-07-21-thn-picus-n-hour-patching-mythos-verizon-dbir-analysis/cover.jpg Patch-to-exploit is hours. Patching still isn't optional. https://0daynews.com/articles/2026-07-21-anubis-fairlife-1tb-nutanix-claim-declines-comment/ 0dayNews en 2026-07-21T20:15:00.000Z Anubis claims Fairlife hit, 1TB and Nutanix encrypted Anubis ransomware, Coca-Cola Fairlife, Nutanix encryption, ransomware leak site, food and beverage ransomware https://0daynews.com/articles/2026-07-21-anubis-fairlife-1tb-nutanix-claim-declines-comment/cover.jpg Anubis claims Fairlife hit, 1TB and Nutanix encrypted https://0daynews.com/articles/2026-07-21-apple-hide-my-email-mail-logs-july3-fix-year-disclosure/ 0dayNews en 2026-07-21T20:15:00.000Z Apple fixes Hide My Email leak, year after disclosure Apple Hide My Email, iCloud+ alias leak, responsible disclosure, Mail logs metadata, 404 Media, Tyler Murphy https://0daynews.com/articles/2026-07-21-apple-hide-my-email-mail-logs-july3-fix-year-disclosure/cover.jpg Apple fixes Hide My Email leak, year after disclosure https://0daynews.com/articles/2026-07-21-cisa-kev-dd-wrt-cve-2021-27137-upnp-ssdp-strcpy-r45724/ 0dayNews en 2026-07-21T19:15:00.000Z DD-WRT UPnP flaw CVE-2021-27137 added to CISA KEV dd-wrt, cve-2021-27137, cisa-kev, upnp, ssdp, router, buffer-overflow https://0daynews.com/articles/2026-07-21-cisa-kev-dd-wrt-cve-2021-27137-upnp-ssdp-strcpy-r45724/cover.jpg DD-WRT UPnP flaw CVE-2021-27137 added to CISA KEV https://0daynews.com/articles/2026-07-21-watchtowr-sharepoint-cve-2026-50522-devcore-third-july-patch-active-exploitation/ 0dayNews en 2026-07-21T17:30:00.000Z SharePoint CVE-2026-50522 exploited after public PoC CVE-2026-50522, Microsoft SharePoint, watchTowr, DEVCORE, deserialization, active exploitation, Patch Tuesday https://0daynews.com/articles/2026-07-21-watchtowr-sharepoint-cve-2026-50522-devcore-third-july-patch-active-exploitation/cover.jpg SharePoint CVE-2026-50522 exploited after public PoC https://0daynews.com/articles/2026-07-21-wp2shell-mass-scanning-kevintel-watchtowr-wiz-fuse-triage/ 0dayNews en 2026-07-21T15:15:00.000Z wp2shell mass scanning confirmed — patch triage tonight wp2shell, CVE-2026-63030, WordPress, mass exploitation, KEVIntel, watchTowr, Wiz https://0daynews.com/articles/2026-07-21-wp2shell-mass-scanning-kevintel-watchtowr-wiz-fuse-triage/cover.jpg wp2shell mass scanning confirmed — patch triage tonight https://0daynews.com/articles/2026-07-21-aws-kiro-mcp-config-silent-rewrite-intezer-kodem-april-patch-july-disclosure/ 0dayNews en 2026-07-21T14:20:00.000Z AWS patched a silent Kiro RCE in April, disclosed today AWS Kiro, agentic IDE, prompt injection, MCP, supply chain, AI agent security, Intezer https://0daynews.com/articles/2026-07-21-aws-kiro-mcp-config-silent-rewrite-intezer-kodem-april-patch-july-disclosure/cover.jpg AWS patched a silent Kiro RCE in April, disclosed today https://0daynews.com/articles/2026-07-21-zhang-arxiv-android-mobile-agent-frameworks-overlay-adb-pivot/ 0dayNews en 2026-07-21T14:20:00.000Z Android AI agent frameworks: overlay text pivots to host Android, AI agents, prompt injection, ADB, AppAgent, Mobile-Agent-v3, arXiv https://0daynews.com/articles/2026-07-21-zhang-arxiv-android-mobile-agent-frameworks-overlay-adb-pivot/cover.jpg Android AI agent frameworks: overlay text pivots to host https://0daynews.com/articles/2026-07-21-bit2watt-zhejiang-ches-2026-gpu-cloud-tenant-grid-swings-analysis/ 0dayNews en 2026-07-21T13:15:00.000Z Bit2Watt: what the GPU cloud tenant abstracts away Bit2Watt, Zhejiang University, CHES 2026, GPU cloud, data center grid, power grid harmonics, cloud tenant risk https://0daynews.com/articles/2026-07-21-bit2watt-zhejiang-ches-2026-gpu-cloud-tenant-grid-swings-analysis/cover.jpg Bit2Watt: what the GPU cloud tenant abstracts away https://0daynews.com/articles/2026-07-21-qilin-pan-os-cve-2026-0257-globalprotect-arctic-wolf-june-exploitation/ 0dayNews en 2026-07-21T12:00:00.000Z Qilin exploits PAN-OS GlobalProtect CVE-2026-0257 Qilin, PAN-OS, GlobalProtect, CVE-2026-0257, Arctic Wolf, ransomware, CISA KEV https://0daynews.com/articles/2026-07-21-qilin-pan-os-cve-2026-0257-globalprotect-arctic-wolf-june-exploitation/cover.jpg Qilin exploits PAN-OS GlobalProtect CVE-2026-0257 https://0daynews.com/articles/2026-07-21-microsoft-wsus-manual-fix-susdb-cleanup-maxxml-reindex-iisreset/ 0dayNews en 2026-07-21T10:30:00.000Z Microsoft ships manual WSUS fix: SUSDB cleanup, IISReset WSUS, Windows Server Update Services, Microsoft, SUSDB, MaxXMLPerRequest, patch management, Configuration Manager https://0daynews.com/articles/2026-07-21-microsoft-wsus-manual-fix-susdb-cleanup-maxxml-reindex-iisreset/cover.jpg Microsoft ships manual WSUS fix: SUSDB cleanup, IISReset https://0daynews.com/articles/2026-07-21-acros-0patch-legacyhive-free-micropatches-windows-10-server-2019/ 0dayNews en 2026-07-21T09:15:00.000Z 0patch ships free unofficial fix for LegacyHive zero-day LegacyHive, 0patch, ACROS Security, Windows zero-day, micropatch, User Profile Service, LPE https://0daynews.com/articles/2026-07-21-acros-0patch-legacyhive-free-micropatches-windows-10-server-2019/cover.jpg 0patch ships free unofficial fix for LegacyHive zero-day https://0daynews.com/articles/2026-07-21-jetbrains-teamcity-cve-2024-27198-epss-0999-two-years-past-patch/ 0dayNews en 2026-07-21T07:05:00.000Z TeamCity CVE-2024-27198: EPSS 0.999 two years past patch jetbrains, teamcity, cve-2024-27198, kev, epss, ci-cd, supply-chain https://0daynews.com/articles/2026-07-21-jetbrains-teamcity-cve-2024-27198-epss-0999-two-years-past-patch/cover.jpg TeamCity CVE-2024-27198: EPSS 0.999 two years past patch https://0daynews.com/articles/2026-07-21-signature-was-there-trust-wasnt-week-retrospective/ 0dayNews en 2026-07-21T06:15:00.000Z The signature was there. The trust wasn't. code signing, trust chain, CylindricalCanine, DigiCert, HelloNet, UAT-11795, supply chain https://0daynews.com/articles/2026-07-21-signature-was-there-trust-wasnt-week-retrospective/cover.jpg The signature was there. The trust wasn't. https://0daynews.com/articles/2026-07-21-mythos-three-months-exposure-window-triage-playbook/ 0dayNews en 2026-07-21T05:15:00.000Z Mythos at three months: measure exposure, not volume Mythos, CVE triage, exposure window, KEV, EPSS, patch management, vulnerability management https://0daynews.com/articles/2026-07-21-mythos-three-months-exposure-window-triage-playbook/cover.jpg Mythos at three months: measure exposure, not volume https://0daynews.com/articles/2026-07-21-volexity-uta0533-sonicwall-sma1000-knuckleball-orangetail-june22/ 0dayNews en 2026-07-21T04:15:00.000Z Volexity ties SonicWall SMA1000 zero-days to UTA0533 SonicWall SMA1000, CVE-2026-15409, CVE-2026-15410, UTA0533, Volexity, KNUCKLEBALL, ORANGETAIL, threat intel https://0daynews.com/articles/2026-07-21-volexity-uta0533-sonicwall-sma1000-knuckleball-orangetail-june22/cover.jpg Volexity ties SonicWall SMA1000 zero-days to UTA0533 https://0daynews.com/articles/2026-07-21-ai-agent-sandboxes-only-as-tight-as-host-tools/ 0dayNews en 2026-07-21T04:05:00.000Z AI-agent sandboxes are only as tight as the host tools AI coding agents, sandbox escape, Pillar Security, agent security, Cursor, Codex CLI, Gemini CLI https://0daynews.com/articles/2026-07-21-ai-agent-sandboxes-only-as-tight-as-host-tools/cover.jpg AI-agent sandboxes are only as tight as the host tools https://0daynews.com/articles/2026-07-20-ostium-arbitrum-off-chain-oracle-forgery-23-75m-lp-vault-drain/ 0dayNews en 2026-07-21T01:05:00.000Z Ostium's LP vault down $23.75M after oracle-feed forgery Ostium, Arbitrum, price oracle, DEX, Tornado Cash, off-chain infrastructure https://0daynews.com/articles/2026-07-20-ostium-arbitrum-off-chain-oracle-forgery-23-75m-lp-vault-drain/cover.jpg Ostium's LP vault down $23.75M after oracle-feed forgery https://0daynews.com/articles/2026-07-21-estee-lauder-cl0p-oracle-ebs-cve-2025-61882-bi-publisher-11-month-dwell/ 0dayNews en 2026-07-21T00:20:00.000Z Estée Lauder confirms Cl0p Oracle EBS breach, 11mo dwell Estée Lauder, Cl0p, Oracle E-Business Suite, CVE-2025-61882, BI Publisher Integration, data breach, HR system https://0daynews.com/articles/2026-07-21-estee-lauder-cl0p-oracle-ebs-cve-2025-61882-bi-publisher-11-month-dwell/cover.jpg Estée Lauder confirms Cl0p Oracle EBS breach, 11mo dwell