https://0daynews.com/articles/2026-09-20-kcp-cve-2026-61682-user-impersonation-front-proxy/ 0dayNews en 2026-09-20T10:00:00.000Z kcp Front-Proxy Lets Attackers Impersonate Any User kcp, CVE-2026-61682, Kubernetes, user impersonation, front-proxy, cloud https://0daynews.com/articles/2026-09-20-kcp-cve-2026-61682-user-impersonation-front-proxy/cover.jpg kcp Front-Proxy Lets Attackers Impersonate Any User https://0daynews.com/articles/2026-09-20-icinga2-cve-2026-61550-auth-bypass-dos-patched/ 0dayNews en 2026-09-20T09:00:00.000Z Icinga 2 Patches CVSS 9.8 Auth Bypass and Stack Overflow Icinga, CVE-2026-61550, CVE-2026-61551, cluster security, monitoring, patch https://0daynews.com/articles/2026-09-20-icinga2-cve-2026-61550-auth-bypass-dos-patched/cover.jpg Icinga 2 Patches CVSS 9.8 Auth Bypass and Stack Overflow https://0daynews.com/articles/2026-09-20-bragjack-ai-browser-agent-hijack/ 0dayNews en 2026-09-20T08:00:00.000Z BragJack PoC Hijacks AI Browser Agents via Extensions BragJack, browser extensions, AI agents, Chrome, Edge, extension security https://0daynews.com/articles/2026-09-20-bragjack-ai-browser-agent-hijack/cover.jpg BragJack PoC Hijacks AI Browser Agents via Extensions https://0daynews.com/articles/2026-09-20-solarwinds-arm-cve-2026-28326-hardcoded-key-rce/ 0dayNews en 2026-09-20T04:30:00.000Z SolarWinds ARM Hard-Coded Key Allows Unauthenticated RCE SolarWinds, Access Rights Manager, ARM, CVE-2026-28326, RCE, hard-coded key, patch https://0daynews.com/articles/2026-09-20-solarwinds-arm-cve-2026-28326-hardcoded-key-rce/cover.jpg SolarWinds ARM Hard-Coded Key Allows Unauthenticated RCE https://0daynews.com/articles/2026-09-20-shinyhunters-hacks-clop-tor-site/ 0dayNews en 2026-09-20T04:00:00.000Z ShinyHunters Breaches Clop Tor Site, Steals Onion Keys ShinyHunters, Clop, ransomware, extortion, Tor, onion keys, Grav CMS https://0daynews.com/articles/2026-09-20-shinyhunters-hacks-clop-tor-site/cover.jpg ShinyHunters Breaches Clop Tor Site, Steals Onion Keys https://0daynews.com/articles/2026-09-19-microsoft-fabric-cve-2026-69843-cvss10-auth-bypass/ 0dayNews en 2026-09-19T14:00:00.000Z Microsoft Fabric Auth Bypass Reaches CVSS 10.0 microsoft fabric, CVE-2026-69843, authentication bypass, CVSS 10.0, cloud security, privilege escalation https://0daynews.com/articles/2026-09-19-microsoft-fabric-cve-2026-69843-cvss10-auth-bypass/cover.jpg Microsoft Fabric Auth Bypass Reaches CVSS 10.0 https://0daynews.com/articles/2026-09-19-azure-ai-foundry-cve-2026-85889-cvss10-privilege-escalation/ 0dayNews en 2026-09-19T12:00:00.000Z Microsoft Fixes CVSS 10.0 Flaw in Azure AI Foundry CVE-2026-85889, Azure AI Foundry, Microsoft, CVSS 10.0, privilege escalation, missing authentication, cloud security https://0daynews.com/articles/2026-09-19-azure-ai-foundry-cve-2026-85889-cvss10-privilege-escalation/cover.jpg Microsoft Fixes CVSS 10.0 Flaw in Azure AI Foundry https://0daynews.com/articles/2026-09-19-waterplum-north-korea-job-seekers-30k-devices/ 0dayNews en 2026-09-19T10:00:00.000Z WaterPlum: North Korea Targets Job Seekers, 30K Devices Hit North Korea, WaterPlum, infostealers, fake job interviews, cryptocurrency theft, BeaverTail https://0daynews.com/articles/2026-09-19-waterplum-north-korea-job-seekers-30k-devices/cover.jpg WaterPlum: North Korea Targets Job Seekers, 30K Devices Hit https://0daynews.com/articles/2026-09-19-cisa-kev-three-linux-kernel-exploited/ 0dayNews en 2026-09-19T08:30:00.000Z CISA Adds Three Exploited Linux Kernel Flaws to KEV linux kernel, CISA KEV, CVE-2025-39682, CVE-2026-53266, CVE-2025-39964, exploitation, patch https://0daynews.com/articles/2026-09-19-cisa-kev-three-linux-kernel-exploited/cover.jpg CISA Adds Three Exploited Linux Kernel Flaws to KEV https://0daynews.com/articles/2026-09-19-gyazo-breach-23m-records-oauth-tokens/ 0dayNews en 2026-09-19T08:00:00.000Z Gyazo Breach Exposes 23M Records and OAuth Tokens data breach, Gyazo, OAuth tokens, Helpfeel, password hashes, image sharing https://0daynews.com/articles/2026-09-19-gyazo-breach-23m-records-oauth-tokens/cover.jpg Gyazo Breach Exposes 23M Records and OAuth Tokens https://0daynews.com/articles/2026-09-18-ransomware-manufacturers-surge-supply-chain-2026/ 0dayNews en 2026-09-18T13:00:00.000Z Ransomware Attacks on Manufacturers Up 40% in H1 2026 ransomware, manufacturing, supply-chain, operational-technology, threat-intel, The-Gentlemen https://0daynews.com/articles/2026-09-18-ransomware-manufacturers-surge-supply-chain-2026/cover.jpg Ransomware Attacks on Manufacturers Up 40% in H1 2026 https://0daynews.com/articles/2026-09-18-orkes-conductor-cve-2026-58138-rce-exploited/ 0dayNews en 2026-09-18T12:00:00.000Z Orkes Conductor RCE CVE-2026-58138 Exploited in Attacks orkes, conductor, CVE-2026-58138, RCE, workflow-orchestration, unauthenticated https://0daynews.com/articles/2026-09-18-orkes-conductor-cve-2026-58138-rce-exploited/cover.jpg Orkes Conductor RCE CVE-2026-58138 Exploited in Attacks https://0daynews.com/articles/2026-09-18-unbound-cve-2026-81642-dnssec-rce/ 0dayNews en 2026-09-18T10:00:00.000Z Unbound 1.26.1 Fixes Critical DNSSEC Heap Overflow unbound, dns, dnssec, heap-overflow, rce, CVE-2026-81642, nlnetlabs https://0daynews.com/articles/2026-09-18-unbound-cve-2026-81642-dnssec-rce/cover.jpg Unbound 1.26.1 Fixes Critical DNSSEC Heap Overflow