This Week In Security: What’s In A Name, The AI Bugpocalypse Hits Everyone, OpenWRT Flaws, And Duress Passwords

A weekly security roundup covering several major developments: Google introduces a new threat actor naming system alongside existing schemes from CrowdStrike and Microsoft. OpenWRT patches a critical DHCPv6 stack buffer overflow affecting MIPS-based devices, along with XSS flaws in its web interface. Cisco announces a twice-monthly patch cycle and plans to stop assigning CVEs to lower-severity AI-discovered bugs. Microsoft recommends a 3-day patch window amid the AI-driven 'bugpocalypse' that is flooding IT teams with record vulnerability counts. Oracle's July 2026 patch set covers nearly 1,500 CVEs across 334 products. Linux kernel maintainers disclosed 323 additional CVEs in three days. GrapheneOS's duress password feature is in the spotlight after a US border incident raises legal and safety questions. FreeBSD patches a WireGuard implementation flaw that allows packet injection or data modification.

Source: https://hackaday.com/2026/07/31/this-week-in-security-whats-in-a-name-the-ai-bugpocalypse-hits-everyone-openwrt-flaws-and-duress-passwords. 8sync News only summarizes and links out; content copyright belongs to the authors and original sources.