CyberNews The Hidden Flaw in AI Security Frameworks In recent years, the world of artificial intelligence (AI) has been swept up in a flurry of regulatory activity, with governments and industry leaders scrambling to establish frameworks for ensuring the security and accountability of these powerful systems. The EU AI Act, NIST’s AI Risk Management Framework, and … Read more
Okta to Bolster Identity Security with Acquisition of Permiso In a significant move, Okta, a leading provider of identity and access management solutions, has announced its intention to acquire Permiso Security, a cloud-native identity security platform specializing in threat detection and mitigation across human, non-human, and agentic identities. The deal is expected to expand Okta’s … Read more
Bank of America Acquires UK-Based Cybersecurity Firm MDSec in Bid to Expand Expertise In a significant move to bolster its cybersecurity capabilities, Bank of America has announced plans to acquire UK-based information security consultancy MDSec Consulting Limited. The acquisition, which is expected to close in the fourth quarter of 2026 pending regulatory approvals, marks a … Read more
A Critical Code Execution Vulnerability in TeamCity Has Been Patched, but Users Must Act Quickly to Protect Their Environments JetBrains has released patches for a critical-severity vulnerability in its TeamCity On-Premises software that can be exploited without authentication. The security flaw, tracked as CVE-2026-63077 with a CVSS score of 9.8, allows an unauthenticated attacker to … Read more
CareCloud Data Breach Exposes Sensitive Information for Over 350,000 Individuals A major data breach has struck healthcare information technology company CareCloud, compromising sensitive personal and medical information of at least 350,000 individuals. The incident involved an electronic health record environment within the CareCloud Health division, which was disrupted on March 16, 2026. According to an … Read more
Okta’s Latest Acquisition Signals Shift in Identity Security Landscape In a move that marks a significant expansion into security operations, identity management giant Okta has signed a definitive agreement to acquire Permiso Security, a cloud-native identity security platform. The deal is expected to close in the third quarter of 2027 and will bring Permiso’s cutting-edge … Read more
Bank of America’s $500 Million Bet on Cybersecurity Expertise In a significant move to bolster its cybersecurity defenses, Bank of America has announced plans to acquire UK-based information security consultancy MDSec Consulting Limited. The deal, expected to close in the fourth quarter of 2026 pending regulatory approvals, marks a major expansion of the bank’s presence … Read more
A coordinated cyberattack has disrupted automated controls at dozens of water utilities in Minnesota, prompting a fresh warning from the US Cybersecurity and Infrastructure Security Agency (CISA) to protect operational technology (OT) against malicious activity targeting programmable logic controllers (PLCs). The alert comes on the heels of a wave of targeted attacks on OT systems, … Read more
A Critical Vulnerability in TeamCity Exposes Organizations to Remote Code Execution Attacks A devastating security flaw has been discovered in TeamCity On-Premises, a popular continuous integration and delivery (CI/CD) platform used by thousands of organizations worldwide. The vulnerability, tracked as CVE-2026-63077, allows attackers to bypass authentication checks and execute arbitrary operating system commands with the … Read more
As the cybersecurity landscape continues to evolve at breakneck speed, one of the most hyped and debated topics in recent months has been Anthropic’s Claude Mythos model. But what exactly is Mythos, and how should security teams be reacting to its supposed capabilities? In this article, we’ll delve into the world of large language models … Read more