https://0daynews.com/articles/2026-07-14-ku-leuven-distrinet-85-crypto-wallet-extensions-address-linking/ 0dayNews en 2026-07-14T18:20:00.000Z KU Leuven: 85 wallet extensions leak addresses cross-site KU Leuven, DistriNet, crypto wallet extension, address linking, browser extension privacy, PETS 2026, wallet fingerprinting https://0daynews.com/articles/2026-07-14-ku-leuven-distrinet-85-crypto-wallet-extensions-address-linking/cover.jpg KU Leuven: 85 wallet extensions leak addresses cross-site https://0daynews.com/articles/2026-07-14-progress-sharefile-storage-zone-5-12-5-6-0-2-path-traversal-patch/ 0dayNews en 2026-07-14T17:20:00.000Z Progress patches ShareFile zero-day: 5.12.5 and 6.0.2 out Progress ShareFile, Storage Zone Controller, path traversal, vendor patch, managed file transfer, zero-day https://0daynews.com/articles/2026-07-14-progress-sharefile-storage-zone-5-12-5-6-0-2-path-traversal-patch/cover.jpg Progress patches ShareFile zero-day: 5.12.5 and 6.0.2 out https://0daynews.com/articles/2026-07-14-rabbitmq-miggo-oauth-secret-cross-tenant-cve-2026-57219/ 0dayNews en 2026-07-14T16:20:00.000Z Miggo: RabbitMQ leaked OAuth secret via obsolete endpoint rabbitmq, oauth, cve-2026-57219, message-broker, miggo, cross-tenant, cloud-security https://0daynews.com/articles/2026-07-14-rabbitmq-miggo-oauth-secret-cross-tenant-cve-2026-57219/cover.jpg Miggo: RabbitMQ leaked OAuth secret via obsolete endpoint https://0daynews.com/articles/2026-07-14-proofpoint-oauth-client-id-spoofing-entra-signin-logs-blind/ 0dayNews en 2026-07-14T15:00:00.000Z OAuth client ID spoofing sneaks past Entra sign-in logs microsoft-entra-id, oauth, credential-stuffing, proofpoint, ropc, conditional-access, detection-engineering https://0daynews.com/articles/2026-07-14-proofpoint-oauth-client-id-spoofing-entra-signin-logs-blind/cover.jpg OAuth client ID spoofing sneaks past Entra sign-in logs https://0daynews.com/articles/2026-07-14-eset-uefi-shim-cve-2026-8863-secure-boot-bypass/ 0dayNews en 2026-07-14T14:15:00.000Z ESET: 11 old signed UEFI shims still bypass Secure Boot uefi, secure boot, shim, eset, microsoft, cve-2026-8863, dbx https://0daynews.com/articles/2026-07-14-eset-uefi-shim-cve-2026-8863-secure-boot-bypass/cover.jpg ESET: 11 old signed UEFI shims still bypass Secure Boot https://0daynews.com/articles/2026-07-14-sap-july-patch-day-three-criticals-netweaver-approuter-commerce/ 0dayNews en 2026-07-14T13:15:00.000Z SAP's July Patch Day: three criticals, worst is 9.9 sap, netweaver, approuter, commerce cloud, patch day, cve-2026-44747, cve-2026-27690, cve-2026-44761 https://0daynews.com/articles/2026-07-14-sap-july-patch-day-three-criticals-netweaver-approuter-commerce/cover.jpg SAP's July Patch Day: three criticals, worst is 9.9 https://0daynews.com/articles/2026-07-14-ofac-1vpns-rashevskyi-silayev-sb0559-cryptor-designation/ 0dayNews en 2026-07-14T11:20:00.000Z OFAC sanctions 1VPNS admin plus Belarusian cryptor seller ofac, sanctions, 1vpns, ransomware, cryptor, operation-saffron, us-treasury https://0daynews.com/articles/2026-07-14-ofac-1vpns-rashevskyi-silayev-sb0559-cryptor-designation/cover.jpg OFAC sanctions 1VPNS admin plus Belarusian cryptor seller https://0daynews.com/articles/2026-07-14-cereblab-grok-build-0-2-93-git-repo-upload-gcs/ 0dayNews en 2026-07-14T10:15:00.000Z Grok Build v0.2.93 uploaded whole repos to xAI's bucket grok-build, xai, ai-coding-cli, data-exposure, secrets-leak, gcs-bucket https://0daynews.com/articles/2026-07-14-cereblab-grok-build-0-2-93-git-repo-upload-gcs/cover.jpg Grok Build v0.2.93 uploaded whole repos to xAI's bucket https://0daynews.com/articles/2026-07-14-jfrog-148-npm-packages-browser-ddos-botnet-may/ 0dayNews en 2026-07-14T09:15:00.000Z 148 npm packages ran a browser-based DDoS botnet in May npm, supply-chain, JFrog, DDoS botnet, web proxy, browser abuse https://0daynews.com/articles/2026-07-14-jfrog-148-npm-packages-browser-ddos-botnet-may/cover.jpg 148 npm packages ran a browser-based DDoS botnet in May https://0daynews.com/articles/2026-07-14-microsoft-shinyhunters-salesforce-oauth-three-paths/ 0dayNews en 2026-07-14T08:20:00.000Z A year of ShinyHunters OAuth abuse, mapped by Microsoft microsoft, shinyhunters, salesforce, oauth, storm-3138, saas-supply-chain, klue https://0daynews.com/articles/2026-07-14-microsoft-shinyhunters-salesforce-oauth-three-paths/cover.jpg A year of ShinyHunters OAuth abuse, mapped by Microsoft https://0daynews.com/articles/2026-07-14-forg365-phaas-m365-device-code-aitm-market/ 0dayNews en 2026-07-14T05:45:00.000Z Forg365 shows PhaaS became a $400/mo rental market forg365, phishing-as-a-service, microsoft-365, device-code-phishing, aitm, telegram, threat-intel https://0daynews.com/articles/2026-07-14-forg365-phaas-m365-device-code-aitm-market/cover.jpg Forg365 shows PhaaS became a $400/mo rental market https://0daynews.com/articles/2026-07-14-jscrambler-npm-post-mortem-four-versions-8-22-clean/ 0dayNews en 2026-07-14T02:15:00.000Z Jscrambler: four npm versions hit, publish creds revoked jscrambler, npm, supply-chain, publish credentials, preinstall, infostealer, Socket https://0daynews.com/articles/2026-07-14-jscrambler-npm-post-mortem-four-versions-8-22-clean/cover.jpg Jscrambler: four npm versions hit, publish creds revoked https://0daynews.com/articles/2026-07-13-nca-russian-coms-five-charged-1-8m-spoofed-calls/ 0dayNews en 2026-07-13T22:15:00.000Z NCA charges five over Russian Coms spoofing platform Russian Coms, NCA, caller-ID spoofing, Operation Henhouse, vishing, STIR/SHAKEN, Ofcom https://0daynews.com/articles/2026-07-13-nca-russian-coms-five-charged-1-8m-spoofed-calls/cover.jpg NCA charges five over Russian Coms spoofing platform https://0daynews.com/articles/2026-07-13-meta-2026-0182881-lachlan-dunn-emotion-listening-patent/ 0dayNews en 2026-07-13T22:00:00.000Z Meta patent describes an always-on emotion-reading AI meta, ai patent, ambient listening, emotion analysis, surveillance, privacy, smart glasses https://0daynews.com/articles/2026-07-13-meta-2026-0182881-lachlan-dunn-emotion-listening-patent/cover.jpg Meta patent describes an always-on emotion-reading AI https://0daynews.com/articles/2026-07-13-nihon-kotsu-japan-taxi-cyberattack-dispatch-offline/ 0dayNews en 2026-07-13T21:00:00.000Z Nihon Kotsu cyberattack takes Japan taxi dispatch offline nihon kotsu, japan, taxi, cyberattack, malware, dispatch outage https://0daynews.com/articles/2026-07-13-nihon-kotsu-japan-taxi-cyberattack-dispatch-offline/cover.jpg Nihon Kotsu cyberattack takes Japan taxi dispatch offline https://0daynews.com/articles/2026-07-13-jamf-crashstealer-werkbit-notarized-macos-stealer/ 0dayNews en 2026-07-13T20:00:00.000Z Notarized Werkbit.app carries CrashStealer past Gatekeeper CrashStealer, Werkbit, Jamf Threat Labs, macOS, notarization, Gatekeeper, infostealer https://0daynews.com/articles/2026-07-13-jamf-crashstealer-werkbit-notarized-macos-stealer/cover.jpg Notarized Werkbit.app carries CrashStealer past Gatekeeper https://0daynews.com/articles/2026-07-13-modheader-stripe-olt-stanfordstudies-dormant-collector/ 0dayNews en 2026-07-13T19:20:00.000Z ModHeader carried a dormant collector to 1.6M installs ModHeader, browser extension, supply chain, Chrome Web Store, Edge Add-ons, Stripe OLT, dormant collector https://0daynews.com/articles/2026-07-13-modheader-stripe-olt-stanfordstudies-dormant-collector/cover.jpg ModHeader carried a dormant collector to 1.6M installs https://0daynews.com/articles/2026-07-13-cisa-kev-cve-2008-4128-cisco-ios-12-4-csrf/ 0dayNews en 2026-07-13T18:30:00.000Z Cisco IOS 12.4 CSRF From 2008 Lands in CISA KEV CISA KEV, Cisco IOS, CVE-2008-4128, Cisco IOS 12.4, cross-site request forgery, CSRF, BOD 26-04, end-of-life hardware https://0daynews.com/articles/2026-07-13-cisa-kev-cve-2008-4128-cisco-ios-12-4-csrf/cover.jpg Cisco IOS 12.4 CSRF From 2008 Lands in CISA KEV https://0daynews.com/articles/2026-07-13-memghost-arxiv-persistent-memory-poison-openclaw/ 0dayNews en 2026-07-13T17:15:00.000Z MemGhost: an email that rewrites an AI agent's memory MemGhost, prompt injection, AI agent memory, OpenClaw, persistent memory, Claude Code SDK https://0daynews.com/articles/2026-07-13-memghost-arxiv-persistent-memory-poison-openclaw/cover.jpg MemGhost: an email that rewrites an AI agent's memory https://0daynews.com/articles/2026-07-13-cisa-github-leak-postmortem-nine-alerts-six-months/ 0dayNews en 2026-07-13T16:15:00.000Z CISA postmortem: nine alerts ignored, six months exposed CISA, GitHub, GitGuardian, AWS GovCloud, incident response, KrebsOnSecurity https://0daynews.com/articles/2026-07-13-cisa-github-leak-postmortem-nine-alerts-six-months/cover.jpg CISA postmortem: nine alerts ignored, six months exposed https://0daynews.com/articles/2026-07-13-lidl-online-shop-breach-de-be-nl-service-provider/ 0dayNews en 2026-07-13T15:00:00.000Z Lidl online shop breach hits DE, BE, NL via provider lidl, data breach, third-party breach, service provider, germany, netherlands, belgium https://0daynews.com/articles/2026-07-13-lidl-online-shop-breach-de-be-nl-service-provider/cover.jpg Lidl online shop breach hits DE, BE, NL via provider https://0daynews.com/articles/2026-07-13-huntress-ai-generated-powershell-ad-enum/ 0dayNews en 2026-07-13T14:20:00.000Z Huntress Flags Suspected AI-Written PowerShell in AD Case Huntress, AD enumeration, PowerShell, LLM, SharpShares, s5cmd https://0daynews.com/articles/2026-07-13-huntress-ai-generated-powershell-ad-enum/cover.jpg Huntress Flags Suspected AI-Written PowerShell in AD Case https://0daynews.com/articles/2026-07-13-eu-uk-first-joint-cyber-sanctions-russia-33-named/ 0dayNews en 2026-07-13T12:30:00.000Z First joint EU-UK cyber sanctions name 33 Russian targets eu sanctions, uk sanctions, russia, gru, fsb center 16, sandworm, turla, lumma stealer https://0daynews.com/articles/2026-07-13-eu-uk-first-joint-cyber-sanctions-russia-33-named/cover.jpg First joint EU-UK cyber sanctions name 33 Russian targets https://0daynews.com/articles/2026-07-13-fsb-centre-16-cve-2018-0171-router-hygiene-csa/ 0dayNews en 2026-07-13T11:20:00.000Z Seven years on, CVE-2018-0171 draws a 13-state advisory fsb-centre-16, berserk-bear, static-tundra, cisco-smart-install, cve-2018-0171, critical-infrastructure, router-hygiene https://0daynews.com/articles/2026-07-13-fsb-centre-16-cve-2018-0171-router-hygiene-csa/cover.jpg Seven years on, CVE-2018-0171 draws a 13-state advisory https://0daynews.com/articles/2026-07-13-lexfo-evilginx-three-crews-open-directory/ 0dayNews en 2026-07-13T09:15:00.000Z Three Evilginx Crews, One Forgotten Bash History evilginx, phishing, microsoft-365, aitm, oauth-device-code, lexfo, threat-intel https://0daynews.com/articles/2026-07-13-lexfo-evilginx-three-crews-open-directory/cover.jpg Three Evilginx Crews, One Forgotten Bash History