CyberNews A Critical Code Execution Vulnerability in TeamCity Has Been Patched, but Users Must Act Quickly to Protect Their Environments JetBrains has released patches for a critical-severity vulnerability in its TeamCity On-Premises software that can be exploited without authentication. The security flaw, tracked as CVE-2026-63077 with a CVSS score of 9.8, allows an unauthenticated attacker to … Read more
CareCloud Data Breach Exposes Sensitive Information for Over 350,000 Individuals A major data breach has struck healthcare information technology company CareCloud, compromising sensitive personal and medical information of at least 350,000 individuals. The incident involved an electronic health record environment within the CareCloud Health division, which was disrupted on March 16, 2026. According to an … Read more
Okta’s Latest Acquisition Signals Shift in Identity Security Landscape In a move that marks a significant expansion into security operations, identity management giant Okta has signed a definitive agreement to acquire Permiso Security, a cloud-native identity security platform. The deal is expected to close in the third quarter of 2027 and will bring Permiso’s cutting-edge … Read more
Bank of America’s $500 Million Bet on Cybersecurity Expertise In a significant move to bolster its cybersecurity defenses, Bank of America has announced plans to acquire UK-based information security consultancy MDSec Consulting Limited. The deal, expected to close in the fourth quarter of 2026 pending regulatory approvals, marks a major expansion of the bank’s presence … Read more
A coordinated cyberattack has disrupted automated controls at dozens of water utilities in Minnesota, prompting a fresh warning from the US Cybersecurity and Infrastructure Security Agency (CISA) to protect operational technology (OT) against malicious activity targeting programmable logic controllers (PLCs). The alert comes on the heels of a wave of targeted attacks on OT systems, … Read more
A Critical Vulnerability in TeamCity Exposes Organizations to Remote Code Execution Attacks A devastating security flaw has been discovered in TeamCity On-Premises, a popular continuous integration and delivery (CI/CD) platform used by thousands of organizations worldwide. The vulnerability, tracked as CVE-2026-63077, allows attackers to bypass authentication checks and execute arbitrary operating system commands with the … Read more
As the cybersecurity landscape continues to evolve at breakneck speed, one of the most hyped and debated topics in recent months has been Anthropic’s Claude Mythos model. But what exactly is Mythos, and how should security teams be reacting to its supposed capabilities? In this article, we’ll delve into the world of large language models … Read more
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a stark warning to water and wastewater system operators: protect your operational technology (OT) from malicious activity targeting programmable logic controllers (PLCs). The agency’s alert comes on the heels of a coordinated cyberattack that disrupted automated controls at dozens of water utilities in Minnesota, leaving … Read more
The Hype Surrounding Claude Mythos: A Reality Check for Security Teams A powerful new artificial intelligence (AI) model has taken center stage in the cybersecurity world, sparking both excitement and concern. Anthropic’s Claude Mythos, a large language model (LLM), has been touted as capable of discovering and exploiting critical zero-day vulnerabilities with ease, even in … Read more
Major AI Vendors Warned of Potential Security Weaknesses in Harnesses A concerning security vulnerability has been discovered in the software frameworks used by major artificial intelligence (AI) vendors, including Anthropic, Google, and OpenAI. Researchers at Novee Security found that these “harnesses” can create attack vectors when components are too trusting of each other, potentially allowing … Read more