China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware
Ravie LakshmananJul 08, 2026Malware / Network Security A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay…
Month: July 2026
The silent substrate: how 175,000 AI endpoints are reshaping the internet
Over the past year, my research partner Silas Cutler and I have conducted a global census of publicly reachable AI systems. What we found challenges…
CVE-2026-53359: Januscape Linux KVM Flaw Enables VM Escape
A newly disclosed Linux kernel vulnerability, CVE-2026-53359, dubbed Januscape, has exposed a critical weakness in the Linux Kernel-based Virtual Machine (KVM) hypervisor. The flaw resides in the shadow MMU code and…
Bendigo Bank scoping more than 3000 ideas for AI use
Bendigo Bank has a pipeline of more than 3000 ideas to use agentic AI to “make the organisation better” and is running them through a…
Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks
An Iran-linked advanced persistent threat (APT) actor has been using a modular command-and-control (C&C) framework in recent attacks targeting organizations in Israel, Check Point reports.…
U.S. CISA adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 08,…
Found fast, fixed slow: The gap the AI clearinghouse must close
The AI-focused executive order President Donald Trump signed last month gave the Treasury Department, the National Security Agency, and the Cybersecurity and Infrastructure Security Agency…
China weighs open-weight AI’s security risks against national tech innovation strategy: researchers
China is facing a delicate regulatory balancing act as it weighs the security risks of open-weight AI models against an innovation strategy that has been…
13 in-demand IT security certifications for higher pay
OffSec Experienced Penetration Tester (OSEP) The OffSec Experienced Penetration Tester is ideal for penetration testers and ethical hackers who need more advanced techniques to sharpen offensive skills…
Hackers can use 9 of the most popular AI tools to assemble massive botnets
In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are inherently unable to distinguish between…
Google Unified Security Recommended Program Selects Wiz
At Wiz, we believe the future of security is open, unified, and built around customer choice. That’s why we’re proud to be among the first…
CISA orders feds to patch max severity ColdFusion flaw by Friday
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commercial web…