Product
high
threat
UAT-7810 Expands ORB Networks with New Malware; ARToken Phishing-as-a-Service and Device Vulnerabilities Highlighted
10 TTPs 8 IOCsThe China-nexus threat actor UAT-7810 is expanding its Operational Relay Box (ORB) networks by exploiting known vulnerabilities in unpatched Ruckus and ASUS routers to deploy custom backdoors like LONGLEASH and DOGLEASH, while other threats include the ARToken Phishing-as-a-Service platform targeting Microsoft 365, critical flaws in AirDrop/Quick Share, and a backdoor in Tenda router firmware.
Ruckus routers +5
UAT-7810
China-nexus
APT
router-exploitation
ORB-network
backdoor
phishing-as-a-service
credential-theft
data-exfiltration
+3
10t
8i
high
advisory
Apple Security Updates — July 2026
4 CVEs 10 IOCsRoundup of Apple security advisories published in July 2026.
PoC
macOS LaunchAgents +46
roundup
4c
10i
updated
low
advisory
Spike in Bytes Sent to an External Device via Airdrop
2 rules 1 TTPA machine learning job has detected a spike in bytes of data written to an external device via Airdrop, potentially indicating illicit data copying or transfer activities.
Airdrop +1
data-exfiltration
macos
2r
1t