https://0daynews.com/articles/2026-07-19-cert-ua-uac-0145-sandworm-clickfix-ukraine/ 0dayNews en 2026-07-19T18:00:00.000Z CERT-UA: UAC-0145 (Sandworm) runs ClickFix on Ukraine CERT-UA, UAC-0145, Sandworm, ClickFix, Ukraine, EtherHiding, COWARDDUCK https://0daynews.com/articles/2026-07-19-cert-ua-uac-0145-sandworm-clickfix-ukraine/cover.jpg CERT-UA: UAC-0145 (Sandworm) runs ClickFix on Ukraine https://0daynews.com/articles/2026-07-19-kaspersky-hellonet-vipnet-updater-dll-sideload-russian-orgs/ 0dayNews en 2026-07-19T16:30:00.000Z Kaspersky details HelloNet abuse of ViPNet updater HelloNet, ViPNet, InfoTeCS, Kaspersky, DLL sideloading, HelloInjector, APT https://0daynews.com/articles/2026-07-19-kaspersky-hellonet-vipnet-updater-dll-sideload-russian-orgs/cover.jpg Kaspersky details HelloNet abuse of ViPNet updater https://0daynews.com/articles/2026-07-19-volexity-uta0533-sma1000-rootrun-knuckleball-orangetail/ 0dayNews en 2026-07-19T15:00:00.000Z SonicWall SMA1000: Volexity names UTA0533, IoC list out SonicWall SMA1000, UTA0533, Volexity, CVE-2026-15409, CVE-2026-15410, ROOTRUN, ORANGETAIL https://0daynews.com/articles/2026-07-19-volexity-uta0533-sma1000-rootrun-knuckleball-orangetail/cover.jpg SonicWall SMA1000: Volexity names UTA0533, IoC list out https://0daynews.com/articles/2026-07-19-legacyhive-nightmare-eclipse-windows-user-profile-usrclass-lpe-unpatched/ 0dayNews en 2026-07-19T06:15:00.000Z LegacyHive: PoC drops for unpatched Windows LPE zero-day LegacyHive, Windows zero-day, local privilege escalation, User Profile Service, usrclass.dat, Nightmare Eclipse https://0daynews.com/articles/2026-07-19-legacyhive-nightmare-eclipse-windows-user-profile-usrclass-lpe-unpatched/cover.jpg LegacyHive: PoC drops for unpatched Windows LPE zero-day https://0daynews.com/articles/2026-07-19-metasploit-weekly-http-smb-relay-riscv-fetch-payloads/ 0dayNews en 2026-07-19T03:20:00.000Z Metasploit adds HTTP-to-SMB NTLM relay, RISC-V payloads Metasploit, Rapid7, NTLM relay, SMB signing, RISC-V, fetch payloads https://0daynews.com/articles/2026-07-19-metasploit-weekly-http-smb-relay-riscv-fetch-payloads/cover.jpg Metasploit adds HTTP-to-SMB NTLM relay, RISC-V payloads https://0daynews.com/articles/2026-07-18-microsoft-acr-stealer-april-june-webdav-etherhiding/ 0dayNews en 2026-07-18T22:20:00.000Z Microsoft ties ACR Stealer surge to WebDAV, blockchain C2 ACR Stealer, Amatera, ClickFix, WebDAV, EtherHiding, Microsoft Threat Intelligence, DPAPI https://0daynews.com/articles/2026-07-18-microsoft-acr-stealer-april-june-webdav-etherhiding/cover.jpg Microsoft ties ACR Stealer surge to WebDAV, blockchain C2 https://0daynews.com/articles/2026-07-18-7-zip-26-02-xz-heap-overflow-rce-zdi-26-444/ 0dayNews en 2026-07-18T21:00:00.000Z 7-Zip 26.02 patches XZ heap overflow, no auto-update 7-Zip, ZDI-26-444, XZ, heap overflow, remote code execution, patch, Windows https://0daynews.com/articles/2026-07-18-7-zip-26-02-xz-heap-overflow-rce-zdi-26-444/cover.jpg 7-Zip 26.02 patches XZ heap overflow, no auto-update https://0daynews.com/articles/2026-07-18-doj-chen-zhang-queens-brooklyn-43m-investment-fraud-laundering-140-accounts-45-shells/ 0dayNews en 2026-07-18T18:15:00.000Z Two indicted over $43M laundered from investment scams money laundering, investment fraud, pig butchering, DOJ indictment, shell companies, HSI https://0daynews.com/articles/2026-07-18-doj-chen-zhang-queens-brooklyn-43m-investment-fraud-laundering-140-accounts-45-shells/cover.jpg Two indicted over $43M laundered from investment scams https://0daynews.com/articles/2026-07-18-nadmesh-go-botnet-shodan-comfyui-ollama-3811-aws-keys/ 0dayNews en 2026-07-18T16:15:00.000Z NadMesh botnet raids exposed AI tools for 3,811 AWS keys nadmesh, ollama, comfyui, langflow, n8n, open-webui, gradio, aws-keys, kubernetes, shodan, cloud-security https://0daynews.com/articles/2026-07-18-nadmesh-go-botnet-shodan-comfyui-ollama-3811-aws-keys/cover.jpg NadMesh botnet raids exposed AI tools for 3,811 AWS keys https://0daynews.com/articles/2026-07-18-expel-digicert-goldeneyedog-cylindricalcanine-27-ev-code-signing-certs-zhong-stealer/ 0dayNews en 2026-07-18T15:00:00.000Z Expel: GoldenEyeDog stole 27 EV certs from DigiCert digicert, goldeneyedog, cylindricalcanine, ev-code-signing, zhong-stealer, expel, supply-chain https://0daynews.com/articles/2026-07-18-expel-digicert-goldeneyedog-cylindricalcanine-27-ev-code-signing-certs-zhong-stealer/cover.jpg Expel: GoldenEyeDog stole 27 EV certs from DigiCert https://0daynews.com/articles/2026-07-18-abbott-shinyhunters-vishing-exact-sciences-labcentral-disputed/ 0dayNews en 2026-07-18T14:15:00.000Z Abbott confirms Exact Sciences hit; LabCentral disputed Abbott, Exact Sciences, LabCentral, ShinyHunters, vishing, Microsoft Entra, data extortion https://0daynews.com/articles/2026-07-18-abbott-shinyhunters-vishing-exact-sciences-labcentral-disputed/cover.jpg Abbott confirms Exact Sciences hit; LabCentral disputed https://0daynews.com/articles/2026-07-18-checkmarx-vitevenom-chainveil-seven-npm-tron-blockchain-c2/ 0dayNews en 2026-07-18T14:00:00.000Z Seven Vite-adjacent npm packages route a RAT through Tron ViteVenom, ChainVeil, Checkmarx, npm supply chain, Vite, blockchain C2, Tron https://0daynews.com/articles/2026-07-18-checkmarx-vitevenom-chainveil-seven-npm-tron-blockchain-c2/cover.jpg Seven Vite-adjacent npm packages route a RAT through Tron https://0daynews.com/articles/2026-07-18-okta-hollowbyte-openssl-dos-june-silent-fix/ 0dayNews en 2026-07-18T13:15:00.000Z HollowByte: 11-byte OpenSSL DoS, no CVE, silent June fix OpenSSL, HollowByte, denial-of-service, Okta Red Team, TLS, memory exhaustion, glibc https://0daynews.com/articles/2026-07-18-okta-hollowbyte-openssl-dos-june-silent-fix/cover.jpg HollowByte: 11-byte OpenSSL DoS, no CVE, silent June fix https://0daynews.com/articles/2026-07-18-wordpress-core-cve-2026-63030-wp2shell-rce-poc-public/ 0dayNews en 2026-07-18T13:05:00.000Z WordPress Core RCE (wp2shell): CVE-2026-63030, PoC public CVE-2026-63030, wp2shell, WordPress, WordPress Core, unauthenticated RCE, GitHub Security Advisory, public PoC https://0daynews.com/articles/2026-07-18-wordpress-core-cve-2026-63030-wp2shell-rce-poc-public/cover.jpg WordPress Core RCE (wp2shell): CVE-2026-63030, PoC public https://0daynews.com/articles/2026-07-18-choi-lee-seoul-uiuc-adi-agent-data-injection-web-coding-agents/ 0dayNews en 2026-07-18T10:15:00.000Z Agent Data Injection: The Bug Under Every AI Agent Agent Data Injection, AI agent security, indirect prompt injection, arXiv 2607.05120, Claude Code, Google Antigravity, probabilistic delimiter injection https://0daynews.com/articles/2026-07-18-choi-lee-seoul-uiuc-adi-agent-data-injection-web-coding-agents/cover.jpg Agent Data Injection: The Bug Under Every AI Agent https://0daynews.com/articles/2026-07-17-ec-google-android-qaap-mic-cam-screen-hotword-rival-ai/ 0dayNews en 2026-07-17T22:15:00.000Z EU order opens Android mic, cam, screen to rival AI agents Android, Google, European Commission, Digital Markets Act, Gemini, QAAP, hotword, prompt injection https://0daynews.com/articles/2026-07-17-ec-google-android-qaap-mic-cam-screen-hotword-rival-ai/cover.jpg EU order opens Android mic, cam, screen to rival AI agents