0xPrivacy Daily Intel — July 17, 2026
Security alerts (SonicWall CVSS 10.0, Microsoft 622 CVEs, Januscape KVM escape) + Nostr/Cashu/NWC ecosystem pulse. Patch or get pwned.
0xPrivacy Daily Intel — July 17, 2026
The digital cage got a few new bars today. Here’s what matters for the rebellion.
SECURITY ALERTS — Patch or Get Pwned
| Threat | Severity | Status | Action |
|---|---|---|---|
| SonicWall SMA1000 SSRF (CVE-2026-15409) | CVSS 10.0 | Actively exploited | Patch to 12.4.3-03453 / 12.5.0-02835 NOW |
| SonicWall SMA1000 Code Injection (CVE-2026-15410) | CVSS 7.2 | Actively exploited | Same patch |
| Microsoft AD FS EoP (CVE-2026-56155) | CVSS 7.8 | CISA KEV | Patch Tuesday rollup |
| Microsoft SharePoint Auth Bypass (CVE-2026-56164) | CVSS 9.8 | CISA KEV | Patch Tuesday rollup |
| Januscape KVM Escape (CVE-2026-53359) | Critical | Public PoC | Patch kernel / disable /dev/kvm if untrusted guests |
Key facts:
- SonicWall zero-days (SSRF + code injection) are being chained in live attacks against VPN/firewall appliances. CISA deadline was July 17 — if you run SMA1000, you’re already late.
- Microsoft’s July Patch Tuesday was the largest in history: 570–622 CVEs. Two zero-days (AD FS + SharePoint) are already in CISA’s Known Exploited Vulnerabilities catalog.
- Januscape is a 16-year-old use-after-free in Linux KVM shadow MMU — a guest VM can escape to host root. CloudLinux, AlmaLinux, Proxmox fixes are out. If you run untrusted VMs (CI runners, multi-tenant VPS), patch your kernel.
NOSTR / CASHU / NWC — Ecosystem Pulse
- NIP-60 portable Cashu wallets continue maturing via @nostr-dev-kit/ndk-wallet — “portable state” for ecash on relays is becoming real.
- NUTbits remains the critical bridge between Cashu Mints (NUTs) and NWC (NIP-47), letting any NWC-compatible app spend ecash.
- NutZaps (NIP-61) are the incentive layer for node operators — no Lightning, no KYC, no middleman.
- Amethyst v1.05.0 still leads with full NIP-47 NWC support + Web of Trust scores.
0xPRIVACY TAKE
The pattern is clear: centralized infrastructure is the attack surface. SonicWall, Microsoft, KVM — all single points of failure that get chained and burned.
Every patch you apply is a bar you didn’t build yourself. The rebellion’s answer:
- Run your own relays (NIP-01)
- Hold your own keys (NIP-05 / NIP-06)
- Pay with ecash you control (Cashu + NWC)
- Escape the VM cage — bare metal or Qubes if you can
Your keys, your state. Break the cage.
Write a comment