https://0daynews.com/articles/2026-07-30-azure-cosmos-db-cosmosescape-cross-tenant/ 0dayNews en 2026-07-30T20:00:00.000Z Azure CosmosEscape Flaw Exposed Any Tenant's Database azure, cosmos-db, gremlin, sandbox-escape, cross-tenant, cloud-security, wiz https://0daynews.com/articles/2026-07-30-azure-cosmos-db-cosmosescape-cross-tenant/cover.jpg Azure CosmosEscape Flaw Exposed Any Tenant's Database https://0daynews.com/articles/2026-07-30-teams-vishing-chaos-ransomware-north-america/ 0dayNews en 2026-07-30T19:00:00.000Z Teams IT Vishing Drops Chaos Ransomware on US Firms Chaos ransomware, Microsoft Teams, vishing, social engineering, remote access, North America https://0daynews.com/articles/2026-07-30-teams-vishing-chaos-ransomware-north-america/cover.jpg Teams IT Vishing Drops Chaos Ransomware on US Firms https://0daynews.com/articles/2026-07-30-shinyhunters-brinks-home-breach/ 0dayNews en 2026-07-30T18:00:00.000Z Brinks Home Confirms Breach; ShinyHunters Claims Credit shinyhunters, data-breach, brinks-home, residential-security, extortion, threat-actor https://0daynews.com/articles/2026-07-30-shinyhunters-brinks-home-breach/cover.jpg Brinks Home Confirms Breach; ShinyHunters Claims Credit https://0daynews.com/articles/2026-07-30-analog-devices-data-breach-exfiltration/ 0dayNews en 2026-07-30T16:05:00.000Z Analog Devices Confirms Breach, Files Exfiltrated analog devices, data breach, exfiltration, semiconductor, incident disclosure https://0daynews.com/articles/2026-07-30-analog-devices-data-breach-exfiltration/cover.jpg Analog Devices Confirms Breach, Files Exfiltrated https://0daynews.com/articles/2026-07-30-copilot-word-prompt-injection-propagation/ 0dayNews en 2026-07-30T14:30:00.000Z Copilot Prompt Injection Can Rewrite Docs, Self-Propagate microsoft-365, copilot, prompt-injection, word, ai-security, llm-security, data-manipulation https://0daynews.com/articles/2026-07-30-copilot-word-prompt-injection-propagation/cover.jpg Copilot Prompt Injection Can Rewrite Docs, Self-Propagate https://0daynews.com/articles/2026-07-30-anysign4pc-korean-watering-hole-signbt-copperhedge/ 0dayNews en 2026-07-30T13:00:00.000Z AnySign4PC Exploited in Korean Watering Hole Campaign AnySign4PC, watering-hole, SIGNBT, COPPERHEDGE, North Korea, Lazarus Group, South Korea https://0daynews.com/articles/2026-07-30-anysign4pc-korean-watering-hole-signbt-copperhedge/cover.jpg AnySign4PC Exploited in Korean Watering Hole Campaign https://0daynews.com/articles/2026-07-30-silver-fox-byovd-valleyrat-japan/ 0dayNews en 2026-07-30T12:00:00.000Z Silver Fox Chains 3 Drivers in New Japan BYOVD Campaign silver fox, byovd, valleyrat, winos, japan, kernel driver, chinese cybercrime https://0daynews.com/articles/2026-07-30-silver-fox-byovd-valleyrat-japan/cover.jpg Silver Fox Chains 3 Drivers in New Japan BYOVD Campaign https://0daynews.com/articles/2026-07-30-void-blizzard-owa-credential-rotation/ 0dayNews en 2026-07-30T11:00:00.000Z OWAReaper Backdoor Outlasts Credential Rotation OWAReaper, Void Blizzard, Laundry Bear, Exchange OWA, credential rotation, Russia APT, Microsoft https://0daynews.com/articles/2026-07-30-void-blizzard-owa-credential-rotation/cover.jpg OWAReaper Backdoor Outlasts Credential Rotation https://0daynews.com/articles/2026-07-30-fcc-covered-list-foreign-robots-power-inverters/ 0dayNews en 2026-07-30T10:30:00.000Z FCC Bars New Foreign Robots, Power Inverters on Cyber Risk FCC, Covered List, mobile robots, power inverters, equipment authorization, supply chain security, national security https://0daynews.com/articles/2026-07-30-fcc-covered-list-foreign-robots-power-inverters/cover.jpg FCC Bars New Foreign Robots, Power Inverters on Cyber Risk https://0daynews.com/articles/2026-07-30-sapphire-sleet-npm-debug-chalk-north-korea/ 0dayNews en 2026-07-30T06:30:00.000Z Amazon Ties Sapphire Sleet to npm debug, chalk Hijack sapphire-sleet, npm, supply-chain, north-korea, debug, chalk, bluenoroff https://0daynews.com/articles/2026-07-30-sapphire-sleet-npm-debug-chalk-north-korea/cover.jpg Amazon Ties Sapphire Sleet to npm debug, chalk Hijack https://0daynews.com/articles/2026-07-30-ir-gap-coordination-not-tools/ 0dayNews en 2026-07-30T06:00:00.000Z 73% Not Ready: The IR Gap Is Coordination, Not Tools incident-response, IR-readiness, coordination, CISO, tabletop-exercise, executive-alignment https://0daynews.com/articles/2026-07-30-ir-gap-coordination-not-tools/cover.jpg 73% Not Ready: The IR Gap Is Coordination, Not Tools https://0daynews.com/articles/2026-07-30-claude-mythos-hawk256-aes-cryptanalysis/ 0dayNews en 2026-07-30T05:00:00.000Z AI Cracks HAWK-256 Post-Quantum Scheme, Speeds AES post-quantum cryptography, HAWK-256, AES-128, cryptanalysis, Anthropic, lattice cryptography, AI security research https://0daynews.com/articles/2026-07-30-claude-mythos-hawk256-aes-cryptanalysis/cover.jpg AI Cracks HAWK-256 Post-Quantum Scheme, Speeds AES https://0daynews.com/articles/2026-07-29-linux-cve-2026-53264-ai-exploit-root/ 0dayNews en 2026-07-30T02:00:00.000Z AI Speeds Linux Kernel Exploit: CVE-2026-53264 Local Root linux kernel, CVE-2026-53264, local privilege escalation, use-after-free, STAR Labs, AI exploit development, CentOS Stream 9 https://0daynews.com/articles/2026-07-29-linux-cve-2026-53264-ai-exploit-root/cover.jpg AI Speeds Linux Kernel Exploit: CVE-2026-53264 Local Root https://0daynews.com/articles/2026-07-29-void-blizzard-exchange-owa-owareaper-zero-day/ 0dayNews en 2026-07-29T23:44:00.000Z Void Blizzard Deploys OWAReaper via Exchange Zero-Day Void Blizzard, Laundry Bear, Exchange OWA, OWAReaper, zero-day, Russia APT, mailbox backdoor https://0daynews.com/articles/2026-07-29-void-blizzard-exchange-owa-owareaper-zero-day/cover.jpg Void Blizzard Deploys OWAReaper via Exchange Zero-Day https://0daynews.com/articles/2026-07-29-openai-agent-hugging-face-credential-breach/ 0dayNews en 2026-07-29T23:00:00.000Z OpenAI Agent Used Exposed Creds in Hugging Face Breach Hugging Face, OpenAI, AI agents, credential exposure, breach, supply-chain https://0daynews.com/articles/2026-07-29-openai-agent-hugging-face-credential-breach/cover.jpg OpenAI Agent Used Exposed Creds in Hugging Face Breach https://0daynews.com/articles/2026-07-29-teamcity-cve-2026-63077-rapid7-agent-protocol/ 0dayNews en 2026-07-29T23:00:00.000Z TeamCity CVE-2026-63077: Agent Protocol Is the Vector CVE-2026-63077, JetBrains, TeamCity, deserialization, RCE, agent polling protocol, Rapid7 https://0daynews.com/articles/2026-07-29-teamcity-cve-2026-63077-rapid7-agent-protocol/cover.jpg TeamCity CVE-2026-63077: Agent Protocol Is the Vector https://0daynews.com/articles/2026-07-29-f6-russian-clone-sites-advance-payment-fraud/ 0dayNews en 2026-07-29T22:00:00.000Z F6: Nine-Year Clone Site Campaign Stole B2B Advance Payments advance payment fraud, vendor impersonation, lookalike domain, B2B fraud, supply chain fraud, F6, Russia https://0daynews.com/articles/2026-07-29-f6-russian-clone-sites-advance-payment-fraud/cover.jpg F6: Nine-Year Clone Site Campaign Stole B2B Advance Payments https://0daynews.com/articles/2026-07-29-cisco-fmc-cve-2026-20316-kev-hardcoded-credential/ 0dayNews en 2026-07-29T21:00:00.000Z CISA KEV: Cisco FMC Hard-Coded Password Now Exploited CVE-2026-20316, Cisco, Firewall Management Center, CISA KEV, hardcoded credential, network security https://0daynews.com/articles/2026-07-29-cisco-fmc-cve-2026-20316-kev-hardcoded-credential/cover.jpg CISA KEV: Cisco FMC Hard-Coded Password Now Exploited https://0daynews.com/articles/2026-07-29-shinyhunters-health-isac-healthcare-sso-warning/ 0dayNews en 2026-07-29T19:00:00.000Z ShinyHunters Targets Healthcare SSO, Health-ISAC Warns ShinyHunters, healthcare, Health-ISAC, SSO, social engineering, data theft, cloud security https://0daynews.com/articles/2026-07-29-shinyhunters-health-isac-healthcare-sso-warning/cover.jpg ShinyHunters Targets Healthcare SSO, Health-ISAC Warns https://0daynews.com/articles/2026-07-29-rails-active-storage-critical-file-read/ 0dayNews en 2026-07-29T18:30:00.000Z Rails Patches Critical File Read via Image Upload ruby-on-rails, active-storage, arbitrary-file-read, image-upload, web-framework, patch https://0daynews.com/articles/2026-07-29-rails-active-storage-critical-file-read/cover.jpg Rails Patches Critical File Read via Image Upload https://0daynews.com/articles/2026-07-29-broadcom-vmware-vcenter-esx-critical-patches/ 0dayNews en 2026-07-29T18:00:00.000Z Broadcom Patches Critical VMware Auth Bypass, RCE, VM Escape VMware, vCenter, ESXi, authentication-bypass, code-execution, VM-escape, Broadcom https://0daynews.com/articles/2026-07-29-broadcom-vmware-vcenter-esx-critical-patches/cover.jpg Broadcom Patches Critical VMware Auth Bypass, RCE, VM Escape https://0daynews.com/articles/2026-07-29-ruflo-mcp-cve-2026-59726-unauthenticated-rce/ 0dayNews en 2026-07-29T17:00:00.000Z Ruflo MCP Scores Perfect CVSS 10 in Unauthenticated RCE Flaw CVE-2026-59726, Ruflo, MCP, unauthenticated RCE, AI agent security, CVSS 10 https://0daynews.com/articles/2026-07-29-ruflo-mcp-cve-2026-59726-unauthenticated-rce/cover.jpg Ruflo MCP Scores Perfect CVSS 10 in Unauthenticated RCE Flaw https://0daynews.com/articles/2026-07-29-minnesota-water-ot-attack/ 0dayNews en 2026-07-29T16:10:00.000Z Coordinated OT Attack Hits 30+ Minnesota Water Systems water utilities, SCADA, OT, Minnesota, MNIT, critical infrastructure, cyberattack https://0daynews.com/articles/2026-07-29-minnesota-water-ot-attack/cover.jpg Coordinated OT Attack Hits 30+ Minnesota Water Systems https://0daynews.com/articles/2026-07-29-ai-exploit-timelines-defender-gap/ 0dayNews en 2026-07-29T14:00:00.000Z AI Cut Exploit Dev Time. Defense Hasn't Caught Up AI, exploit development, vulnerability management, zero-day, patch window, threat intelligence, defender playbook https://0daynews.com/articles/2026-07-29-ai-exploit-timelines-defender-gap/cover.jpg AI Cut Exploit Dev Time. Defense Hasn't Caught Up https://0daynews.com/articles/2026-07-29-russia-fsb-charges-durov-telegram/ 0dayNews en 2026-07-29T12:00:00.000Z Russia Charges Durov as FSB Targets Telegram Content Telegram, Pavel Durov, FSB, Russia, threat-intel, law-enforcement, messaging-platform https://0daynews.com/articles/2026-07-29-russia-fsb-charges-durov-telegram/cover.jpg Russia Charges Durov as FSB Targets Telegram Content https://0daynews.com/articles/2026-07-29-gitea-critical-rce-git-hook-1-27-1/ 0dayNews en 2026-07-29T11:00:00.000Z Gitea Patches Critical RCE, Upgrade to 1.27.1 gitea, rce, git-hook, self-hosted-git, patch, remote-code-execution, developer-tools https://0daynews.com/articles/2026-07-29-gitea-critical-rce-git-hook-1-27-1/cover.jpg Gitea Patches Critical RCE, Upgrade to 1.27.1 https://0daynews.com/articles/2026-07-29-check-point-smartconsole-cve-2026-16232-poc-release/ 0dayNews en 2026-07-29T10:00:00.000Z Public PoC Out for Exploited Check Point Admin Bypass check-point, smartconsole, CVE-2026-16232, authentication bypass, public exploit, CISA KEV https://0daynews.com/articles/2026-07-29-check-point-smartconsole-cve-2026-16232-poc-release/cover.jpg Public PoC Out for Exploited Check Point Admin Bypass https://0daynews.com/articles/2026-07-29-firefox-jit-cve-2026-10702-tor-browser/ 0dayNews en 2026-07-29T09:00:00.000Z Firefox JIT Flaw Enables Tor Browser Code Execution CVE-2026-10702, Firefox, Tor Browser, JIT, code execution, browser security https://0daynews.com/articles/2026-07-29-firefox-jit-cve-2026-10702-tor-browser/cover.jpg Firefox JIT Flaw Enables Tor Browser Code Execution https://0daynews.com/articles/2026-07-29-flying-eagle-android-rat-telegram-leak/ 0dayNews en 2026-07-29T09:00:00.000Z Flying Eagle Android RAT Source Code Leaks to Telegram android, rat, mobile-malware, flying-eagle, telegram, sideloading https://0daynews.com/articles/2026-07-29-flying-eagle-android-rat-telegram-leak/cover.jpg Flying Eagle Android RAT Source Code Leaks to Telegram https://0daynews.com/articles/2026-07-29-openai-eval-agent-four-service-breach-credentials/ 0dayNews en 2026-07-29T08:00:00.000Z OpenAI Eval Agent Breached Four Services with Exposed Creds OpenAI, Hugging Face, credential-exposure, AI-agent-security, eval-environment, lateral-movement, breach https://0daynews.com/articles/2026-07-29-openai-eval-agent-four-service-breach-credentials/cover.jpg OpenAI Eval Agent Breached Four Services with Exposed Creds https://0daynews.com/articles/2026-07-29-ot-isolation-field-reality-explainer/ 0dayNews en 2026-07-29T06:00:00.000Z Why OT Isolation Is Harder Than the Advisory Says OT, ICS, SCADA, isolation, CISA, operational-technology, industrial-control-systems, network-segmentation https://0daynews.com/articles/2026-07-29-ot-isolation-field-reality-explainer/cover.jpg Why OT Isolation Is Harder Than the Advisory Says https://0daynews.com/articles/2026-07-29-joyfill-npm-devpopper-rat-supply-chain/ 0dayNews en 2026-07-29T05:00:00.000Z DEV#POPPER RAT Hidden in Two Joyfill npm Packages npm, supply-chain, DEV#POPPER, RAT, joyfill, Node.js, malware, DPRK https://0daynews.com/articles/2026-07-29-joyfill-npm-devpopper-rat-supply-chain/cover.jpg DEV#POPPER RAT Hidden in Two Joyfill npm Packages https://0daynews.com/articles/2026-07-28-cubepilot-dns-hijacking-drone-controller/ 0dayNews en 2026-07-28T23:00:00.000Z CubePilot Drone Controller Maker Hit by DNS Hijacking CubePilot, DNS hijacking, UAV, drone, firmware, flight controller, supply chain https://0daynews.com/articles/2026-07-28-cubepilot-dns-hijacking-drone-controller/cover.jpg CubePilot Drone Controller Maker Hit by DNS Hijacking