https://0daynews.com/articles/2026-07-23-void-blizzard-zimbra-zero-click-email-theft-airgap/ 0dayNews en 2026-07-23T18:00:00.000Z Void Blizzard Exploits Zimbra Flaw for Email Theft Void Blizzard, Laundry Bear, Zimbra, email theft, CISA, state-sponsored, Russia https://0daynews.com/articles/2026-07-23-void-blizzard-zimbra-zero-click-email-theft-airgap/cover.jpg Void Blizzard Exploits Zimbra Flaw for Email Theft https://0daynews.com/articles/2026-07-23-jadeprox-triback-loader-group-ib-china-nexus-apt/ 0dayNews en 2026-07-23T17:00:00.000Z China-Linked JadeProx Deploys TriBack Loader in Gov Attacks JadeProx, TriBack Loader, China APT, Group-IB, government, healthcare, threat intelligence, Windows loader https://0daynews.com/articles/2026-07-23-jadeprox-triback-loader-group-ib-china-nexus-apt/cover.jpg China-Linked JadeProx Deploys TriBack Loader in Gov Attacks https://0daynews.com/articles/2026-07-23-claude-cowork-vm-escape-mac-files-airgap/ 0dayNews en 2026-07-23T16:00:00.000Z Claude Cowork VM Escape Reaches Mac Files Claude Cowork, VM escape, sandbox escape, Anthropic, Accomplish AI, macOS, AI agent security https://0daynews.com/articles/2026-07-23-claude-cowork-vm-escape-mac-files-airgap/cover.jpg Claude Cowork VM Escape Reaches Mac Files https://0daynews.com/articles/2026-07-23-fedramp-20x-rev5-transition-continuous-monitoring-loop/ 0dayNews en 2026-07-23T15:00:00.000Z FedRAMP 20x Ends Point-in-Time Authorization FedRAMP, FedRAMP 20x, cloud compliance, continuous monitoring, OSCAL, ATO, federal cloud https://0daynews.com/articles/2026-07-23-fedramp-20x-rev5-transition-continuous-monitoring-loop/cover.jpg FedRAMP 20x Ends Point-in-Time Authorization https://0daynews.com/articles/2026-07-23-github-actions-packagist-cpanel-whm-supply-chain/ 0dayNews en 2026-07-23T13:00:00.000Z Attackers Weaponize GitHub Actions Against cPanel Hosts supply chain, GitHub Actions, Packagist, cPanel, WHM, CI/CD abuse, malicious packages https://0daynews.com/articles/2026-07-23-github-actions-packagist-cpanel-whm-supply-chain/cover.jpg Attackers Weaponize GitHub Actions Against cPanel Hosts https://0daynews.com/articles/2026-07-23-refluxfs-cve-2026-64600-linux-kernel-lpe-rhel/ 0dayNews en 2026-07-23T12:00:00.000Z RefluXFS LPE Hits Default RHEL, Fedora, Amazon Linux CVE-2026-64600, Linux kernel, XFS, privilege escalation, LPE, RHEL, Qualys https://0daynews.com/articles/2026-07-23-refluxfs-cve-2026-64600-linux-kernel-lpe-rhel/cover.jpg RefluXFS LPE Hits Default RHEL, Fedora, Amazon Linux https://0daynews.com/articles/2026-07-23-chaos-ransomware-msarat-browser-c2-webrtc-airgap/ 0dayNews en 2026-07-23T11:00:00.000Z Chaos Ransomware's msaRAT Hides C2 in Browser Traffic ransomware, msaRAT, Chaos ransomware, browser C2, WebRTC, TURN relay, command-and-control https://0daynews.com/articles/2026-07-23-chaos-ransomware-msarat-browser-c2-webrtc-airgap/cover.jpg Chaos Ransomware's msaRAT Hides C2 in Browser Traffic https://0daynews.com/articles/2026-07-23-exchange-online-mailbox-quarantine-error-airgap/ 0dayNews en 2026-07-23T10:00:00.000Z Exchange Online Quarantining Mailboxes in Error Since Sunday Exchange Online, Microsoft, mailbox quarantine, Microsoft 365, email security, false positive https://0daynews.com/articles/2026-07-23-exchange-online-mailbox-quarantine-error-airgap/cover.jpg Exchange Online Quarantining Mailboxes in Error Since Sunday https://0daynews.com/articles/2026-07-23-moveit-cve-2023-34362-three-years-clop-data-breach/ 0dayNews en 2026-07-23T08:00:00.000Z MOVEit Transfer and the Breach That Defined 2023 CVE-2023-34362, MOVEit Transfer, Cl0p, SQL injection, data breach, managed file transfer, EPSS https://0daynews.com/articles/2026-07-23-moveit-cve-2023-34362-three-years-clop-data-breach/cover.jpg MOVEit Transfer and the Breach That Defined 2023 https://0daynews.com/articles/2026-07-23-eclypsium-infratrust-pulse-firmware-patch-priority/ 0dayNews en 2026-07-23T07:00:00.000Z Eclypsium Launches InfraTrust for Firmware Patch Priority firmware security, infrastructure vulnerabilities, patch prioritization, Eclypsium, InfraTrust, edge devices, networking https://0daynews.com/articles/2026-07-23-eclypsium-infratrust-pulse-firmware-patch-priority/cover.jpg Eclypsium Launches InfraTrust for Firmware Patch Priority https://0daynews.com/articles/2026-07-23-kratos-phishing-kit-dismantled-microsoft-365-mfa-bypass-fuse/ 0dayNews en 2026-07-23T05:00:00.000Z Kratos Phishing Kit Dismantled in Global Takedown phishing, MFA bypass, Microsoft 365, AiTM, Kratos, law enforcement, session hijacking https://0daynews.com/articles/2026-07-23-kratos-phishing-kit-dismantled-microsoft-365-mfa-bypass-fuse/cover.jpg Kratos Phishing Kit Dismantled in Global Takedown https://0daynews.com/articles/2026-07-22-n-day-n-hour-patch-window-sharepoint-wp2shell/ 0dayNews en 2026-07-23T02:00:00.000Z N-Day Is Now N-Hour: The Vanishing Patch Window n-day exploitation, patch management, CVE, exploit window, SharePoint, wp2shell, vulnerability response https://0daynews.com/articles/2026-07-22-n-day-n-hour-patch-window-sharepoint-wp2shell/cover.jpg N-Day Is Now N-Hour: The Vanishing Patch Window https://0daynews.com/articles/2026-07-22-google-deepmind-gemini-35-flash-cyber-codemender-loop/ 0dayNews en 2026-07-22T23:00:00.000Z Google Gemini 3.5 Flash Cyber Targets Vuln Discovery google, deepmind, gemini, vulnerability-discovery, ai-security, codemender, patch-generation https://0daynews.com/articles/2026-07-22-google-deepmind-gemini-35-flash-cyber-codemender-loop/cover.jpg Google Gemini 3.5 Flash Cyber Targets Vuln Discovery https://0daynews.com/articles/2026-07-22-sharepoint-cve-2026-50522-kev-machine-keys-fuse/ 0dayNews en 2026-07-22T23:00:00.000Z SharePoint RCE on KEV; Attackers Pivot to Machine Keys CVE-2026-50522, SharePoint, CISA KEV, machine keys, RCE, deserialization, Microsoft https://0daynews.com/articles/2026-07-22-sharepoint-cve-2026-50522-kev-machine-keys-fuse/cover.jpg SharePoint RCE on KEV; Attackers Pivot to Machine Keys https://0daynews.com/articles/2026-07-22-check-point-smartconsole-cve-2026-16232-kev-admin-bypass/ 0dayNews en 2026-07-22T22:00:00.000Z Check Point SmartConsole Flaw Gives Attackers Admin Access Check Point, SmartConsole, CVE-2026-16232, CISA KEV, authentication bypass, firewall management https://0daynews.com/articles/2026-07-22-check-point-smartconsole-cve-2026-16232-kev-admin-bypass/cover.jpg Check Point SmartConsole Flaw Gives Attackers Admin Access https://0daynews.com/articles/2026-07-22-upbound-acima-13m-lease-fraud-breach/ 0dayNews en 2026-07-22T22:00:00.000Z Stolen Upbound Data Fueled $13M Acima Lease Fraud Upbound, Acima, data breach, lease fraud, fintech, identity fraud https://0daynews.com/articles/2026-07-22-upbound-acima-13m-lease-fraud-breach/cover.jpg Stolen Upbound Data Fueled $13M Acima Lease Fraud https://0daynews.com/articles/2026-07-22-github-bug-bounty-payouts-halved-vip-tier/ 0dayNews en 2026-07-22T21:00:00.000Z GitHub Cuts Public Bug Bounty Payouts by Half July 27 github, bug bounty, vulnerability research, security research, responsible disclosure, vrt, hacker incentives https://0daynews.com/articles/2026-07-22-github-bug-bounty-payouts-halved-vip-tier/cover.jpg GitHub Cuts Public Bug Bounty Payouts by Half July 27 https://0daynews.com/articles/2026-07-22-south-korea-mfa-diplomatic-academy-breach-airgap/ 0dayNews en 2026-07-22T21:00:00.000Z South Korea MFA Breach: Diplomat Data Exposed 10 Months South Korea, MFA breach, diplomatic data, National Diplomatic Academy, data breach, espionage https://0daynews.com/articles/2026-07-22-south-korea-mfa-diplomatic-academy-breach-airgap/cover.jpg South Korea MFA Breach: Diplomat Data Exposed 10 Months https://0daynews.com/articles/2026-07-22-snap-confine-lpe-ubuntu-desktop-root-fuse/ 0dayNews en 2026-07-22T20:00:00.000Z snap-confine LPE Hits Default Ubuntu Desktop Installs CVE-2026-8933, snap-confine, Ubuntu, privilege escalation, LPE, local root https://0daynews.com/articles/2026-07-22-snap-confine-lpe-ubuntu-desktop-root-fuse/cover.jpg snap-confine LPE Hits Default Ubuntu Desktop Installs https://0daynews.com/articles/2026-07-22-adobe-acrobat-chrome-extension-whatsapp-web-data-access/ 0dayNews en 2026-07-22T17:30:00.000Z Adobe Acrobat Extension Let Sites Read WhatsApp Chats adobe acrobat, chrome extension, whatsapp, browser security, privacy, extension permissions https://0daynews.com/articles/2026-07-22-adobe-acrobat-chrome-extension-whatsapp-web-data-access/cover.jpg Adobe Acrobat Extension Let Sites Read WhatsApp Chats https://0daynews.com/articles/2026-07-22-stadler-rail-everest-ransom-rejected/ 0dayNews en 2026-07-22T17:30:00.000Z Stadler Rail Refuses $12.3M Ransom from Everest stadler rail, everest ransomware, ransomware, third-party risk, supply chain, switzerland, data extortion https://0daynews.com/articles/2026-07-22-stadler-rail-everest-ransom-rejected/cover.jpg Stadler Rail Refuses $12.3M Ransom from Everest https://0daynews.com/articles/2026-07-22-microsoft-exchange-2016-2019-esu-ends-october/ 0dayNews en 2026-07-22T16:00:00.000Z Exchange 2016 and 2019 Lose ESU Patches in October Exchange 2016, Exchange 2019, ESU, end of support, Microsoft, patch management, migration https://0daynews.com/articles/2026-07-22-microsoft-exchange-2016-2019-esu-ends-october/cover.jpg Exchange 2016 and 2019 Lose ESU Patches in October https://0daynews.com/articles/2026-07-22-ostium-23-7m-off-chain-oracle-compromise-airgap/ 0dayNews en 2026-07-22T15:45:00.000Z Ostium Loses $23.7M to Off-Chain Oracle Compromise Ostium, oracle compromise, price manipulation, off-chain infrastructure, DeFi, crypto breach, liquidity provider https://0daynews.com/articles/2026-07-22-ostium-23-7m-off-chain-oracle-compromise-airgap/cover.jpg Ostium Loses $23.7M to Off-Chain Oracle Compromise https://0daynews.com/articles/2026-07-22-windmill-cve-2026-29059-path-traversal-active-exploitation/ 0dayNews en 2026-07-22T15:00:00.000Z CVE-2026-29059: Windmill Path Traversal Actively Exploited CVE-2026-29059, Windmill, path traversal, active exploitation, VulnCheck, arbitrary file read, developer platform https://0daynews.com/articles/2026-07-22-windmill-cve-2026-29059-path-traversal-active-exploitation/cover.jpg CVE-2026-29059: Windmill Path Traversal Actively Exploited https://0daynews.com/articles/2026-07-22-langflow-cve-2026-0770-fifth-kev-entry-federal-friday/ 0dayNews en 2026-07-22T13:20:00.000Z Langflow's fifth KEV entry: CVE-2026-0770, patch by Friday CVE-2026-0770, Langflow, CISA KEV, Zero Day Initiative, Trend Research, unauthenticated RCE, BOD 26-04 https://0daynews.com/articles/2026-07-22-langflow-cve-2026-0770-fifth-kev-entry-federal-friday/cover.jpg Langflow's fifth KEV entry: CVE-2026-0770, patch by Friday https://0daynews.com/articles/2026-07-22-lg-webos-residential-proxy-sdk-ban-spur-brightdata-42-percent/ 0dayNews en 2026-07-22T10:00:00.000Z LG bans residential-proxy SDKs from webOS TV apps LG, webOS, residential proxies, Bright Data, Spur, smart TV, Samsung Tizen https://0daynews.com/articles/2026-07-22-lg-webos-residential-proxy-sdk-ban-spur-brightdata-42-percent/cover.jpg LG bans residential-proxy SDKs from webOS TV apps https://0daynews.com/articles/2026-07-22-azure-devops-mcp-manifold-hidden-pr-comments-hijack-ai-reviewers-fuse/ 0dayNews en 2026-07-22T09:15:00.000Z Azure DevOps MCP: hidden PR text hijacks AI reviewers Azure DevOps MCP, prompt injection, Manifold Security, Microsoft, AI coding agent, indirect prompt injection https://0daynews.com/articles/2026-07-22-azure-devops-mcp-manifold-hidden-pr-comments-hijack-ai-reviewers-fuse/cover.jpg Azure DevOps MCP: hidden PR text hijacks AI reviewers https://0daynews.com/articles/2026-07-22-chick-fil-a-june-credential-stuffing-2182-texans-airgap/ 0dayNews en 2026-07-22T08:00:00.000Z Chick-fil-A discloses June credential-stuffing breach Chick-fil-A, credential stuffing, data breach, loyalty program, password reuse, Chick-fil-A One https://0daynews.com/articles/2026-07-22-chick-fil-a-june-credential-stuffing-2182-texans-airgap/cover.jpg Chick-fil-A discloses June credential-stuffing breach https://0daynews.com/articles/2026-07-22-jfrog-nuget-newtonsoftt-typosquat-digitain-fg-crash-kilobaud/ 0dayNews en 2026-07-22T07:00:00.000Z A NuGet Typosquat That Rigged Games Instead of Wallets supply-chain, nuget, typosquat, newtonsoft-json, jfrog, digitain, dotnet https://0daynews.com/articles/2026-07-22-jfrog-nuget-newtonsoftt-typosquat-digitain-fg-crash-kilobaud/cover.jpg A NuGet Typosquat That Rigged Games Instead of Wallets https://0daynews.com/articles/2026-07-22-openai-attributes-hugging-face-breach-gpt-5-6-sol-exploitgym/ 0dayNews en 2026-07-22T06:15:00.000Z OpenAI attributes Hugging Face breach to GPT-5.6 Sol Hugging Face, OpenAI, GPT-5.6 Sol, ExploitGym, autonomous agent, AI safety, package registry https://0daynews.com/articles/2026-07-22-openai-attributes-hugging-face-breach-gpt-5-6-sol-exploitgym/cover.jpg OpenAI attributes Hugging Face breach to GPT-5.6 Sol https://0daynews.com/articles/2026-07-21-cisa-kev-wp2shell-both-cves-added-bod-26-04-federal-clock/ 0dayNews en 2026-07-22T03:00:00.000Z Both wp2shell CVEs land on CISA KEV — federal clock runs CISA KEV, wp2shell, CVE-2026-63030, CVE-2026-60137, WordPress, BOD 26-04 https://0daynews.com/articles/2026-07-21-cisa-kev-wp2shell-both-cves-added-bod-26-04-federal-clock/cover.jpg Both wp2shell CVEs land on CISA KEV — federal clock runs https://0daynews.com/articles/2026-07-21-zimbra-10-1-20-nine-bugs-snmp-command-injection-tops-list/ 0dayNews en 2026-07-21T23:45:00.000Z Zimbra 10.1.20 patches nine, SNMP injection at the top Zimbra, Zimbra Collaboration Suite, Zimbra 10.1.20, SNMP command injection, Classic Web Client XSS, Nextcloud SSRF, patch release https://0daynews.com/articles/2026-07-21-zimbra-10-1-20-nine-bugs-snmp-command-injection-tops-list/cover.jpg Zimbra 10.1.20 patches nine, SNMP injection at the top https://0daynews.com/articles/2026-07-21-kratos-phaas-olympus-blade-takedown-m365-passkeys-fuse/ 0dayNews en 2026-07-21T23:30:00.000Z Kratos phishing platform seized. M365 exposure is not. Kratos PhaaS, phishing-as-a-service, Operation Olympus Blade, Microsoft 365, AiTM, passkeys, phishing-resistant MFA https://0daynews.com/articles/2026-07-21-kratos-phaas-olympus-blade-takedown-m365-passkeys-fuse/cover.jpg Kratos phishing platform seized. M365 exposure is not. https://0daynews.com/articles/2026-07-21-sharepoint-cve-2026-50522-machine-keys-stolen-rotate-credentials-fuse/ 0dayNews en 2026-07-21T22:05:00.000Z SharePoint attackers stealing keys — rotate credentials now CVE-2026-50522, Microsoft SharePoint, machine keys, watchTowr, Defused, credential rotation, persistence https://0daynews.com/articles/2026-07-21-sharepoint-cve-2026-50522-machine-keys-stolen-rotate-credentials-fuse/cover.jpg SharePoint attackers stealing keys — rotate credentials now https://0daynews.com/articles/2026-07-21-thn-picus-n-hour-patching-mythos-verizon-dbir-analysis/ 0dayNews en 2026-07-21T21:15:00.000Z Patch-to-exploit is hours. Patching still isn't optional. N-day, patch race, Mythos, Verizon DBIR, exposure validation, control effectiveness https://0daynews.com/articles/2026-07-21-thn-picus-n-hour-patching-mythos-verizon-dbir-analysis/cover.jpg Patch-to-exploit is hours. Patching still isn't optional. https://0daynews.com/articles/2026-07-21-anubis-fairlife-1tb-nutanix-claim-declines-comment/ 0dayNews en 2026-07-21T20:15:00.000Z Anubis claims Fairlife hit, 1TB and Nutanix encrypted Anubis ransomware, Coca-Cola Fairlife, Nutanix encryption, ransomware leak site, food and beverage ransomware https://0daynews.com/articles/2026-07-21-anubis-fairlife-1tb-nutanix-claim-declines-comment/cover.jpg Anubis claims Fairlife hit, 1TB and Nutanix encrypted https://0daynews.com/articles/2026-07-21-apple-hide-my-email-mail-logs-july3-fix-year-disclosure/ 0dayNews en 2026-07-21T20:15:00.000Z Apple fixes Hide My Email leak, year after disclosure Apple Hide My Email, iCloud+ alias leak, responsible disclosure, Mail logs metadata, 404 Media, Tyler Murphy https://0daynews.com/articles/2026-07-21-apple-hide-my-email-mail-logs-july3-fix-year-disclosure/cover.jpg Apple fixes Hide My Email leak, year after disclosure https://0daynews.com/articles/2026-07-21-cisa-kev-dd-wrt-cve-2021-27137-upnp-ssdp-strcpy-r45724/ 0dayNews en 2026-07-21T19:15:00.000Z DD-WRT UPnP flaw CVE-2021-27137 added to CISA KEV dd-wrt, cve-2021-27137, cisa-kev, upnp, ssdp, router, buffer-overflow https://0daynews.com/articles/2026-07-21-cisa-kev-dd-wrt-cve-2021-27137-upnp-ssdp-strcpy-r45724/cover.jpg DD-WRT UPnP flaw CVE-2021-27137 added to CISA KEV