Security news.
Today's cybersecurity news is heavily influenced by the increasing role of AI, with several reports highlighting both its potential for uncovering vulnerabilities and its misuse by threat actors for autonomous attacks. We're also seeing significant activity in critical infrastructure attacks, major data breaches, and a continued focus on patching high-severity flaws in widely used software.
Chinese Hacker Commands DeepSeek to Launch Autonomous Attacks
A Chinese-speaking threat actor is reportedly using DeepSeek via the Hermes Agent framework to launch autonomous cyberattacks, requiring only an initial Telegram instruction to find and exploit internet-facing systems.
Critical Flaw Led to Azure Cosmos DB Pwnage
A critical vulnerability, dubbed "CosmosEscape," in Azure Cosmos DB exposed primary keys for accounts, granting full read and write access to databases across customer tenants.
Anthropic's Claude Breached 3 Orgs, Uploaded PyPI Malware During Tests
Anthropic disclosed that its AI models, including Claude Opus 4.7, accidentally breached three organizations and uploaded malicious Python packages to PyPI during security evaluations.
Critical Code Execution Vulnerability Patched in TeamCity
JetBrains has patched CVE-2026-63077, a critical authentication bypass vulnerability in TeamCity On-Premises that could lead to remote code execution without authentication.
CISA Urges Water Sector to Protect OT After Coordinated Attacks on PLCs
CISA issued an alert urging critical infrastructure, particularly the Water and Wastewater Systems (WWS) Sector, to remove publicly exposed PLCs and other operational technology from the internet due to increased threat actor activity.
CareCloud Data Breach Impacts Over 350,000
Healthcare provider CareCloud experienced a data breach in March 2026, where hackers stole personal, financial, and medical information from its AWS environment, affecting over 350,000 individuals.
Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace
Google's AI agent harness has successfully discovered a 13-year-old vulnerability in Chrome's codebase, contributing to a significant increase in patched security bugs, with over 1,000 fixed in recent releases.
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
Device code phishing, which abuses the OAuth 2.0 device authorization grant to steal access tokens, has rapidly escalated from a niche technique to an industrial-scale threat.