Google this week confirmed that this year’s surge in Chrome vulnerabilities has been driven by the use of AI. The increase in Chrome bugs started in April and has continued throughout July, with the latest browser release containing 370 security fixes and bringing the total number of bugs patched this year to over 1,800. Google ..
Categoria : Security
The European Union rolled out a new team on Friday to rein in AI companies across the world, in one of the most aggressive regulations the high-tech sector has so far faced as fears rise over the risks the rapidly advancing technology poses to people, politics and prosperity. Brussels aims to track the use of ..
Anthropic revealed on Thursday that some of its Claude models escaped test environments and hacked into the systems of three organizations while trying to solve a challenge. The admission comes after OpenAI revealed that its models broke out of what was believed to be an isolated environment and breached Hugging Face and other organizations. Anthropic ..
A critical vulnerability in the Azure Cosmos DB database service could have allowed attackers to compromise all databases on the service, cybersecurity outfit Wiz reports. Referred to as CosmosEscape, the security defect could have allowed an attacker to obtain a platform-wide key and retrieve the primary key of any Cosmos DB account, gaining full read ..
Taelor Sutherland is the Associate Editor at Security magazine. Sutherland covers news affecting enterprise security leaders, from industry events to physical & cybersecurity threats and mitigation tactics. She is also responsible for coordinating and publishing web exclusives, multimedia content, social media posts, and a number of eMagazine departments. Sutherland graduated in 2022 with a BA ..
Healthcare information technology company CareCloud is notifying at least 350,000 people that their information was stolen in a data breach. The incident involved an electronic health record environment within the CareCloud Health division, which was disrupted on March 16, 2026. CareCloud’s investigation determined that hackers accessed one of its AWS environments between March 10 and ..
JetBrains this week rolled out patches for a critical-severity vulnerability in TeamCity On-Premises that can be exploited without authentication. Tracked as CVE-2026-63077 (CVSS score of 9.8), the security defect can be exploited via HTTP/S to bypass authentication and achieve remote code execution (RCE). “An unauthenticated attacker could exploit the vulnerability via the TeamCity agent polling ..
When reports surfaced that Anthropic’s AI model, Mythos, could identify thousands of previously unknown vulnerabilities across critical software systems, the response was immediate. Regulators mobilized. Financial leaders convened emergency briefings. Headlines warned of a new era of cyber risk. The concern is understandable, and the capabilities are significant. But the reality is that Mythos did ..
The US Cybersecurity and Infrastructure Security Agency (CISA) is urging water and wastewater system (WWS) operators to protect operational technology (OT) against malicious activity targeting programmable logic controllers (PLCs). The alert is a fresh call to action that comes just days after a coordinated cyberattack disrupted automated controls at dozens of water utilities in Minnesota. ..
Bank of America announced on Thursday that it plans to acquire UK-based information security consultancy MDSec Consulting Limited. Headquartered in Macclesfield, England, MDSec provides technical information security consulting services and employs approximately 65 cybersecurity professionals. The acquisition will expand Charlotte, North Carolina-based Bank of America’s existing presence in northern England. The financial institution has more ..
