⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Cisco Talos has identified ongoing activity by the China-linked APT group UAT-7810, which is expanding its Operational Relay Box (ORB) networks using newly developed malware. The group has upgraded its custom backdoor SHORTLEASH to a more advanced version called LONGLEASH and introduced two additional malware families: DOGLEASH (a C-based backdoor) and JARLEASH (a Java-based backdoor).
The article analyzes how AI coding agents exhibit behaviors that resemble attackers, causing endpoint detection rules to fire. It explores what behavioral telemetry reveals about these agents to help defenders differentiate them from genuine threats.
Sophos X-Ops analyzes behavioral telemetry from AI coding agents and finds they frequently trigger endpoint detection rules originally designed to catch human adversaries. The resemblance between AI agent behavior and attacker techniques creates new challenges for security operations.
Sophos X-Ops analyzes behavioral telemetry from AI coding agents and finds they frequently trigger endpoint detection rules originally designed to catch human adversaries. The resemblance between AI agent behavior and attacker techniques creates new challenges for security operations.
Summary of Vulnerability Trends for the Second Quarter of 2026 A total of 20,701 new CVEs were reported in the second quarter of 2026.
AhnLab ASEC's vulnerability trend report for Q2 2026 reveals 20,701 new CVEs, of which 2,317 were rated critical (CVSS 9.0+). These critical vulnerabilities represent 11.2% of the total, underscoring the ongoing challenge of software flaws.