Daily Cybersecurity Briefing – July 8: Over 6,000 Gitea Instances at Risk from Critical Vulnerability Exploits
Today's cybersecurity highlights: A critical Gitea vulnerability is now being actively exploited, putting more than 6,000 systems worldwide at risk. Threat actor UAT-7810 is operating an ORB network to help other cybercriminals cover their tracks. Meanwhile, hidden backdoors have been discovered in Tenda router firmware, raising serious security concerns for users.
Highlights
- A critical vulnerability in the Gitea source code management platform is now under active exploitation, with over 6,000 internet-exposed instances identified as at risk globally.
- Threat actor UAT-7810 is operating an ORB (Operational Relay Box) network as an anonymization service sold to other cybercriminal groups, complicating attribution efforts.
- Security researchers discovered a hidden backdoor embedded in Tenda router firmware, potentially enabling unauthorized remote access to affected home and small-business devices.
- All three incidents highlight escalating risks across software platforms, cybercriminal infrastructure, and consumer networking hardware as of July 8.
Daily Cybersecurity Briefing – July 8
Today's Key Stories
- Critical Gitea vulnerability under active exploitation
- UAT-7810 operates ORB network to shield cybercriminals
- Hidden backdoor found in Tenda router firmware
Critical Gitea Vulnerability Now Being Actively Exploited
A critical security vulnerability affecting the Gitea source code management platform has moved beyond proof-of-concept into active exploitation. Security researchers warn that more than 6,000 Gitea instances exposed to the public internet may be at risk. Organizations running unpatched versions are urged to apply available security updates immediately and audit their systems for signs of compromise.
UAT-7810 Runs ORB Network as Cover for Cybercriminals
Threat intelligence analysts have identified a hacker group tracked as UAT-7810 that is actively operating an Operational Relay Box (ORB) network. The infrastructure is being offered as an anonymization service to other cybercriminal actors, making it significantly harder for defenders and law enforcement to trace malicious traffic back to its true origin. The group's activities underscore the growing trend of cybercrime-as-a-service, where specialized actors provide operational support to broader criminal ecosystems.
Hidden Backdoor Discovered in Tenda Router Firmware
Security researchers have uncovered a concealed backdoor embedded within the firmware of Tenda-brand routers. The backdoor could potentially allow unauthorized remote access to affected devices, posing serious risks to home and small-business users. Those using Tenda networking equipment are advised to check for firmware updates from the manufacturer and to monitor vendor advisories for further guidance.
This briefing covers major cybersecurity developments for July 8. Stay tuned for further updates as new information becomes available.
原文來源： 查看原文
FAQ
Newsletter
Subscribe to our Low-Altitude Industry Newsletter
Daily curated news on low-altitude economy and drone industry, delivered to your inbox.
Reviewed and published by the LAETimes editorial desk ·
