https://0daynews.com/articles/2026-07-13-jamf-crashstealer-werkbit-notarized-macos-stealer/ 0dayNews en 2026-07-13T20:00:00.000Z Notarized Werkbit.app carries CrashStealer past Gatekeeper CrashStealer, Werkbit, Jamf Threat Labs, macOS, notarization, Gatekeeper, infostealer https://0daynews.com/articles/2026-07-13-jamf-crashstealer-werkbit-notarized-macos-stealer/cover.jpg Notarized Werkbit.app carries CrashStealer past Gatekeeper https://0daynews.com/articles/2026-07-13-modheader-stripe-olt-stanfordstudies-dormant-collector/ 0dayNews en 2026-07-13T19:20:00.000Z ModHeader carried a dormant collector to 1.6M installs ModHeader, browser extension, supply chain, Chrome Web Store, Edge Add-ons, Stripe OLT, dormant collector https://0daynews.com/articles/2026-07-13-modheader-stripe-olt-stanfordstudies-dormant-collector/cover.jpg ModHeader carried a dormant collector to 1.6M installs https://0daynews.com/articles/2026-07-13-cisa-kev-cve-2008-4128-cisco-ios-12-4-csrf/ 0dayNews en 2026-07-13T18:30:00.000Z Cisco IOS 12.4 CSRF From 2008 Lands in CISA KEV CISA KEV, Cisco IOS, CVE-2008-4128, Cisco IOS 12.4, cross-site request forgery, CSRF, BOD 26-04, end-of-life hardware https://0daynews.com/articles/2026-07-13-cisa-kev-cve-2008-4128-cisco-ios-12-4-csrf/cover.jpg Cisco IOS 12.4 CSRF From 2008 Lands in CISA KEV https://0daynews.com/articles/2026-07-13-memghost-arxiv-persistent-memory-poison-openclaw/ 0dayNews en 2026-07-13T17:15:00.000Z MemGhost: an email that rewrites an AI agent's memory MemGhost, prompt injection, AI agent memory, OpenClaw, persistent memory, Claude Code SDK https://0daynews.com/articles/2026-07-13-memghost-arxiv-persistent-memory-poison-openclaw/cover.jpg MemGhost: an email that rewrites an AI agent's memory https://0daynews.com/articles/2026-07-13-cisa-github-leak-postmortem-nine-alerts-six-months/ 0dayNews en 2026-07-13T16:15:00.000Z CISA postmortem: nine alerts ignored, six months exposed CISA, GitHub, GitGuardian, AWS GovCloud, incident response, KrebsOnSecurity https://0daynews.com/articles/2026-07-13-cisa-github-leak-postmortem-nine-alerts-six-months/cover.jpg CISA postmortem: nine alerts ignored, six months exposed https://0daynews.com/articles/2026-07-13-lidl-online-shop-breach-de-be-nl-service-provider/ 0dayNews en 2026-07-13T15:00:00.000Z Lidl online shop breach hits DE, BE, NL via provider lidl, data breach, third-party breach, service provider, germany, netherlands, belgium https://0daynews.com/articles/2026-07-13-lidl-online-shop-breach-de-be-nl-service-provider/cover.jpg Lidl online shop breach hits DE, BE, NL via provider https://0daynews.com/articles/2026-07-13-huntress-ai-generated-powershell-ad-enum/ 0dayNews en 2026-07-13T14:20:00.000Z Huntress Flags Suspected AI-Written PowerShell in AD Case Huntress, AD enumeration, PowerShell, LLM, SharpShares, s5cmd https://0daynews.com/articles/2026-07-13-huntress-ai-generated-powershell-ad-enum/cover.jpg Huntress Flags Suspected AI-Written PowerShell in AD Case https://0daynews.com/articles/2026-07-13-eu-uk-first-joint-cyber-sanctions-russia-33-named/ 0dayNews en 2026-07-13T12:30:00.000Z First joint EU-UK cyber sanctions name 33 Russian targets eu sanctions, uk sanctions, russia, gru, fsb center 16, sandworm, turla, lumma stealer https://0daynews.com/articles/2026-07-13-eu-uk-first-joint-cyber-sanctions-russia-33-named/cover.jpg First joint EU-UK cyber sanctions name 33 Russian targets https://0daynews.com/articles/2026-07-13-fsb-centre-16-cve-2018-0171-router-hygiene-csa/ 0dayNews en 2026-07-13T11:20:00.000Z Seven years on, CVE-2018-0171 draws a 13-state advisory fsb-centre-16, berserk-bear, static-tundra, cisco-smart-install, cve-2018-0171, critical-infrastructure, router-hygiene https://0daynews.com/articles/2026-07-13-fsb-centre-16-cve-2018-0171-router-hygiene-csa/cover.jpg Seven years on, CVE-2018-0171 draws a 13-state advisory https://0daynews.com/articles/2026-07-13-lexfo-evilginx-three-crews-open-directory/ 0dayNews en 2026-07-13T09:15:00.000Z Three Evilginx Crews, One Forgotten Bash History evilginx, phishing, microsoft-365, aitm, oauth-device-code, lexfo, threat-intel https://0daynews.com/articles/2026-07-13-lexfo-evilginx-three-crews-open-directory/cover.jpg Three Evilginx Crews, One Forgotten Bash History https://0daynews.com/articles/2026-07-12-redhook-group-ib-wireless-adb-loopback-shizuku-uid-2000/ 0dayNews en 2026-07-12T15:00:00.000Z RedHook Android RAT pairs Wireless ADB on-device RedHook, Android, Wireless ADB, Wireless Debugging, Accessibility Service, Shizuku, Group-IB https://0daynews.com/articles/2026-07-12-redhook-group-ib-wireless-adb-loopback-shizuku-uid-2000/cover.jpg RedHook Android RAT pairs Wireless ADB on-device https://0daynews.com/articles/2026-07-12-coinspect-ill-bloom-weak-prng-wallet-seed-5-1m-drained/ 0dayNews en 2026-07-12T09:15:00.000Z Ill Bloom: Weak PRNG Drained $5.1M From Crypto Wallets ill bloom, coinspect, cryptocurrency wallet, weak prng, seed phrase, wallet drain https://0daynews.com/articles/2026-07-12-coinspect-ill-bloom-weak-prng-wallet-seed-5-1m-drained/cover.jpg Ill Bloom: Weak PRNG Drained $5.1M From Crypto Wallets https://0daynews.com/articles/2026-07-11-sentinellabs-balochistan-police-china-india-converge/ 0dayNews en 2026-07-11T21:20:00.000Z China, India APTs Converge on Balochistan Police SentinelLABS, Balochistan Police, Mysterious Elephant, PlugX, ShadowPad, Pakistan, APT-C-08 https://0daynews.com/articles/2026-07-11-sentinellabs-balochistan-police-china-india-converge/cover.jpg China, India APTs Converge on Balochistan Police https://0daynews.com/articles/2026-07-11-jscrambler-npm-8-14-0-preinstall-rust-infostealer/ 0dayNews en 2026-07-11T20:15:00.000Z jscrambler 8.14.0 npm hijack: Rust stealer on install jscrambler, npm, supply-chain, preinstall, infostealer, Rust, Socket https://0daynews.com/articles/2026-07-11-jscrambler-npm-8-14-0-preinstall-rust-infostealer/cover.jpg jscrambler 8.14.0 npm hijack: Rust stealer on install