https://0daynews.com/articles/2026-07-10-microsoft-mdash-msrc-humans-downstream/ 0dayNews en 2026-07-10T23:15:00.000Z Microsoft's MDASH and the humans downstream of it Microsoft, MDASH, MSRC, Patch Tuesday, AI vulnerability discovery, Windows security https://0daynews.com/articles/2026-07-10-microsoft-mdash-msrc-humans-downstream/cover.jpg Microsoft's MDASH and the humans downstream of it https://0daynews.com/articles/2026-07-10-openclaw-2026-6-6-nayak-whatsapp-host-rce-chain/ 0dayNews en 2026-07-10T22:15:00.000Z OpenClaw patched a chain that started in a chat message openclaw, ai-assistant, command-injection, sandbox-escape, whatsapp, chinmohan-nayak https://0daynews.com/articles/2026-07-10-openclaw-2026-6-6-nayak-whatsapp-host-rce-chain/cover.jpg OpenClaw patched a chain that started in a chat message https://0daynews.com/articles/2026-07-10-injective-sdk-ts-npm-oidc-thomasralee/ 0dayNews en 2026-07-10T21:15:00.000Z Injective SDK's npm compromise, and the OIDC that let it injective-labs, npm, supply-chain, sdk-ts, oidc, wallet-security https://0daynews.com/articles/2026-07-10-injective-sdk-ts-npm-oidc-thomasralee/cover.jpg Injective SDK's npm compromise, and the OIDC that let it https://0daynews.com/articles/2026-07-10-binarly-uboot-six-flaws-fit-signature-verification/ 0dayNews en 2026-07-10T20:20:00.000Z Six U-Boot bugs sit in front of the signature check U-Boot, Binarly, FIT image, firmware, signature verification, bootloader, BRLY-2026-037 https://0daynews.com/articles/2026-07-10-binarly-uboot-six-flaws-fit-signature-verification/cover.jpg Six U-Boot bugs sit in front of the signature check https://0daynews.com/articles/2026-07-10-vardanyan-ryuk-guilty-plea-portland-six-year-pipeline/ 0dayNews en 2026-07-10T19:15:00.000Z A Ryuk operator pleads guilty, six years after wind-down Ryuk, ransomware, Karen Vardanyan, Department of Justice, Conti, extradition, prosecution https://0daynews.com/articles/2026-07-10-politie-odido-dutch-speaker-vishing-shinyhunters-62m/ 0dayNews en 2026-07-10T18:15:00.000Z Politie Points at Dutch Hackers in the 88GB Odido Leak Odido, ShinyHunters, vishing, Politie, Netherlands, telecom-breach, social-engineering https://0daynews.com/articles/2026-07-10-politie-odido-dutch-speaker-vishing-shinyhunters-6.2m/cover.jpg Politie Points at Dutch Hackers in the 88GB Odido Leak https://0daynews.com/articles/2026-07-10-progress-sharefile-shutdown-storage-zone-moveit-echo/ 0dayNews en 2026-07-10T17:15:00.000Z Progress tells ShareFile on-prem users to shut down servers Progress Software, ShareFile, Storage Zone Controllers, managed file transfer, MOVEit, vendor advisory https://0daynews.com/articles/2026-07-10-progress-sharefile-shutdown-storage-zone-moveit-echo/cover.jpg Progress tells ShareFile on-prem users to shut down servers https://0daynews.com/articles/2026-07-10-donjon-tangem-laser-fault-injection-eal6-samsung/ 0dayNews en 2026-07-10T16:30:00.000Z A laser resets Tangem wallets, and there's no patch Tangem, Ledger Donjon, hardware wallet, fault injection, laser fault injection, EAL6+, Samsung S3D232A https://0daynews.com/articles/2026-07-10-foxio-xring-xquic-qpack-integer-underflow-alibaba-silence/ 0dayNews en 2026-07-10T15:15:00.000Z XRING: 260 bytes, no patch, three months of Alibaba silence XRING, XQUIC, Alibaba, HTTP/3, QPACK, FoxIO, integer underflow https://0daynews.com/articles/2026-07-10-foxio-xring-xquic-qpack-integer-underflow-alibaba-silence/cover.jpg XRING: 260 bytes, no patch, three months of Alibaba silence https://0daynews.com/articles/2026-07-10-wp-shellstorm-socradar-exposed-server-funnel/ 0dayNews en 2026-07-10T14:15:00.000Z WP-SHELLSTORM ran 22 days with its door left open WP-SHELLSTORM, SOCRadar, Ctrl-Alt-Intel, mass hacking, WordPress, Joomla, VShell, SNOWLIGHT https://0daynews.com/articles/2026-07-10-wp-shellstorm-socradar-exposed-server-funnel/cover.jpg WP-SHELLSTORM ran 22 days with its door left open https://0daynews.com/articles/2026-07-10-android-free-vpn-study-familiar-audit-outcome/ 0dayNews en 2026-07-10T13:15:00.000Z 281 free Android VPNs, and a familiar audit outcome Android VPN, free VPN, mobile privacy, DNS leak, Google Play, consumer VPN audit https://0daynews.com/articles/2026-07-10-android-free-vpn-study-familiar-audit-outcome/cover.jpg 281 free Android VPNs, and a familiar audit outcome https://0daynews.com/articles/2026-07-10-illbloom-coinspect-weak-prng-mobile-wallet-drain/ 0dayNews en 2026-07-10T10:30:00.000Z Ill Bloom is a $3.1M lesson in weak randomness, again Ill Bloom, Coinspect, PRNG, recovery phrase, BIP39, cryptocurrency wallet, wallet drainer https://0daynews.com/articles/2026-07-10-illbloom-coinspect-weak-prng-mobile-wallet-drain/cover.jpg Ill Bloom is a $3.1M lesson in weak randomness, again https://0daynews.com/articles/2026-07-10-digitalmint-martino-70-months-blackcat-insider-negotiation/ 0dayNews en 2026-07-10T09:20:00.000Z Ex-DigitalMint negotiator gets 70 months for BlackCat scheme BlackCat, ALPHV, DigitalMint, ransomware negotiation, insider threat, Angelo Martino, incident response https://0daynews.com/articles/2026-07-10-digitalmint-martino-70-months-blackcat-insider-negotiation/cover.jpg Ex-DigitalMint negotiator gets 70 months for BlackCat scheme https://0daynews.com/articles/2026-07-10-meta-muse-image-instagram-public-default-impersonation-surface/ 0dayNews en 2026-07-10T07:20:00.000Z Meta's Muse Image defaults on for public Instagram Meta AI, Muse Image, Instagram, impersonation, deepfake, vishing, threat model https://0daynews.com/articles/2026-07-10-meta-muse-image-instagram-public-default-impersonation-surface/cover.jpg Meta's Muse Image defaults on for public Instagram https://0daynews.com/articles/2026-07-10-clearinghouse-summer-athena-lightwell-old-pattern/ 0dayNews en 2026-07-10T06:15:00.000Z The clearinghouse boom is not new, and neither is the fatigue vulnerability disclosure, Chainguard, Athena, Project Lightwell, CVE, NVD, open source security https://0daynews.com/articles/2026-07-10-clearinghouse-summer-athena-lightwell-old-pattern/cover.jpg The clearinghouse boom is not new, and neither is the fatigue https://0daynews.com/articles/2026-07-10-hackernews-ato-verification-step-passkey-aftermath/ 0dayNews en 2026-07-10T05:00:00.000Z The ATO fight moved past credential stuffing account takeover, credential stuffing, passkeys, MFA, adversary-in-the-middle, The Hacker News https://0daynews.com/articles/2026-07-10-talos-hazel-winning-54-percent-defender-cliche/ 0dayNews en 2026-07-10T04:00:00.000Z Talos on 'attackers only need to be right once' Cisco Talos, defensive security, security clichés, defender mindset, Wimbledon, security marketing https://0daynews.com/articles/2026-07-10-datadog-dormant-github-ghost-accounts-org-enumeration/ 0dayNews en 2026-07-10T03:00:00.000Z Datadog: 50+ dormant GitHub accounts mapping org charts GitHub, Datadog Security Labs, reconnaissance, ghost accounts, OAuth tokens, Julie Agnes Sparks https://0daynews.com/articles/2026-07-09-openmandriva-beatrici-mumble-contributor-repo-sabotage/ 0dayNews en 2026-07-09T23:15:00.000Z OpenMandriva ex-contributor wipes GNOME, Cosmic packages OpenMandriva, Davide Beatrici, Mumble, insider threat, repository sabotage, Cooker, access review https://0daynews.com/articles/2026-07-09-openmandriva-beatrici-mumble-contributor-repo-sabotage/cover.jpg OpenMandriva ex-contributor wipes GNOME, Cosmic packages https://0daynews.com/articles/2026-07-09-talos-vdr-wolfssl-geovision-vtk-dicom-disclosure/ 0dayNews en 2026-07-09T22:35:00.000Z Talos discloses 18 vulns in WolfSSL, GeoVision, VTK-DICOM WolfSSL, GeoVision, VTK-DICOM, Cisco Talos, embedded firmware, third-party disclosure https://0daynews.com/articles/2026-07-09-helix-reliaquest-sharepoint-vishing-blackfile-overlap/ 0dayNews en 2026-07-09T22:00:00.000Z Helix: new data-extortion crew hits SharePoint via vishing Helix, ReliaQuest, SharePoint, data extortion, vishing, device code phishing, BlackFile https://0daynews.com/articles/2026-07-09-microsoft-mdash-ai-scanner-fatter-patch-tuesdays/ 0dayNews en 2026-07-09T22:00:00.000Z Microsoft: MDASH will grow Patch Tuesday numbers Microsoft, Windows, MDASH, Patch Tuesday, AI vulnerability discovery, Pavan Davuluri https://0daynews.com/articles/2026-07-09-injectivelabs-sdk-ts-npm-1-20-21-wallet-stealer/ 0dayNews en 2026-07-09T21:00:00.000Z Injective SDK 1.20.21 on npm shipped a wallet stealer Injective Labs, injectivelabs/sdk-ts, npm, supply chain, wallet stealer, Socket, Ox Security, StepSecurity https://0daynews.com/articles/2026-07-09-injectivelabs-sdk-ts-npm-1-20-21-wallet-stealer/cover.jpg Injective SDK 1.20.21 on npm shipped a wallet stealer https://0daynews.com/articles/2026-07-09-microsoft-gigawiper-bluerabbit-cyberav3ngers-israel-wiper/ 0dayNews en 2026-07-09T20:15:00.000Z GigaWiper/BLUERABBIT: Go-based wiper, CyberAv3ngers-linked GigaWiper, BLUERABBIT, CyberAv3ngers, Crucio, Iran IRGC, Israel wiper, Microsoft Security Blog, Binary Defense https://0daynews.com/articles/2026-07-09-microsoft-gigawiper-bluerabbit-cyberav3ngers-israel-wiper/cover.jpg GigaWiper/BLUERABBIT: Go-based wiper, CyberAv3ngers-linked https://0daynews.com/articles/2026-07-09-npm-12-install-scripts-off-default-github-gat-deprecation/ 0dayNews en 2026-07-09T18:00:00.000Z npm 12 flips install scripts off by default npm, supply chain, GitHub, install scripts, granular access tokens, 2FA https://0daynews.com/articles/2026-07-09-npm-12-install-scripts-off-default-github-gat-deprecation/cover.jpg npm 12 flips install scripts off by default https://0daynews.com/articles/2026-07-09-forg365-phaas-m365-aitm-device-code-zerobec/ 0dayNews en 2026-07-09T16:00:01.000Z Forg365 PhaaS Chains AiTM + Device-Code + AI Lures at M365 Forg365, phishing-as-a-service, Microsoft 365, AiTM, device code phishing, Entra, ZeroBEC https://0daynews.com/articles/2026-07-09-forg365-phaas-m365-aitm-device-code-zerobec/cover.jpg Forg365 PhaaS Chains AiTM + Device-Code + AI Lures at M365 https://0daynews.com/articles/2026-07-09-goddamn-ransomware-poisonx-driver-beast-rebrand/ 0dayNews en 2026-07-09T13:15:00.000Z GodDamn ransomware: Beast rebrand, signed EDR-killer driver GodDamn ransomware, Beast ransomware, PoisonX, BYOVD, Symantec, Hyadina, EDR bypass https://0daynews.com/articles/2026-07-09-goddamn-ransomware-poisonx-driver-beast-rebrand/cover.jpg GodDamn ransomware: Beast rebrand, signed EDR-killer driver https://0daynews.com/articles/2026-07-09-microsoft-owa-light-retirement-exchange-server/ 0dayNews en 2026-07-09T12:15:00.000Z Microsoft to retire OWA Light in Exchange Server Microsoft, Exchange Server, OWA Light, Outlook Web Access, legacy surface, deprecation https://0daynews.com/articles/2026-07-09-interpol-first-light-5811-arrests-293m-seized/ 0dayNews en 2026-07-09T11:15:00.000Z INTERPOL First Light 2026: 5,811 arrests, $293M seized INTERPOL, Operation First Light, BEC, romance scam, sextortion, ASEANAPOL, GCCPOL, financial crime https://0daynews.com/articles/2026-07-09-interpol-first-light-5811-arrests-293m-seized/cover.jpg INTERPOL First Light 2026: 5,811 arrests, $293M seized https://0daynews.com/articles/2026-07-09-ai-now-friendly-fire-claude-code-codex-review-exploit/ 0dayNews en 2026-07-09T10:15:00.000Z Friendly Fire: agents review the trap, then execute it friendly-fire, ai-now-institute, claude-code, openai-codex, autonomous-agents, supply-chain https://0daynews.com/articles/2026-07-09-ai-now-friendly-fire-claude-code-codex-review-exploit/cover.jpg Friendly Fire: agents review the trap, then execute it https://0daynews.com/articles/2026-07-09-assuranceamerica-breach-6-9m-drivers-march-intrusion/ 0dayNews en 2026-07-09T09:30:00.000Z AssuranceAmerica breach: 6.9M drivers, 4-month notice gap AssuranceAmerica, insurance breach, driver data, Maine AG filing, breach notification, identity fraud https://0daynews.com/articles/2026-07-09-assuranceamerica-breach-6-9m-drivers-march-intrusion/cover.jpg AssuranceAmerica breach: 6.9M drivers, 4-month notice gap https://0daynews.com/articles/2026-07-09-infoblox-lurking-lizard-230-domain-fake-7zip-residential-proxy/ 0dayNews en 2026-07-09T08:15:00.000Z Infoblox: Lurking Lizard runs 230-domain fake 7-Zip proxy Lurking Lizard, Infoblox, residential proxy, fake 7-Zip, drop-catching, WireVPN, DNS threat intelligence https://0daynews.com/articles/2026-07-09-infoblox-lurking-lizard-230-domain-fake-7zip-residential-proxy/cover.jpg Infoblox: Lurking Lizard runs 230-domain fake 7-Zip proxy https://0daynews.com/articles/2026-07-09-microsoft-defender-rogueplanet-cve-2026-50656-lpe-patch/ 0dayNews en 2026-07-09T07:15:00.000Z Microsoft patches Defender 'RoguePlanet' LPE; PoC public Microsoft Defender, CVE-2026-50656, RoguePlanet, elevation of privilege, Malware Protection Engine, race condition, out-of-band patch https://0daynews.com/articles/2026-07-09-wiz-ghostapproval-symlink-six-ai-coding-assistants/ 0dayNews en 2026-07-09T06:15:00.000Z GhostApproval symlink bug hits six AI coding assistants GhostApproval, Wiz, AI coding assistants, symlink, trust boundary, CVE-2026-50549, CVE-2026-12958 https://0daynews.com/articles/2026-07-09-simplehelp-cve-2026-48558-oidc-bypass-past-kev-deadline/ 0dayNews en 2026-07-09T04:00:00.000Z SimpleHelp OIDC Auth Bypass Past CISA Deadline: Patch Now SimpleHelp, CVE-2026-48558, OIDC, KEV, remote support, authentication bypass, CISA https://0daynews.com/articles/2026-07-08-redwing-android-maas-oblivion-telegram-zimperium/ 0dayNews en 2026-07-09T02:00:00.000Z RedWing turns Android bank fraud into a Telegram rental RedWing, Oblivion, Zimperium zLabs, Android banking malware, malware-as-a-service, Telegram, accessibility abuse https://0daynews.com/articles/2026-07-08-redwing-android-maas-oblivion-telegram-zimperium/cover.jpg RedWing turns Android bank fraud into a Telegram rental https://0daynews.com/articles/2026-07-08-spain-palencia-carr-noname-logistics-arrest/ 0dayNews en 2026-07-08T23:45:00.000Z Spain arrests suspected CARR logistics operator CARR, CyberArmy of Russia Reborn, NoName057(16), Z-Pentest, hacktivism, Spain, attribution https://0daynews.com/articles/2026-07-08-spain-palencia-carr-noname-logistics-arrest/cover.jpg Spain arrests suspected CARR logistics operator