2026

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In 2026-07-28 at 12:12 By JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution. The vulnerability, assigned CVE-2026-63077 (CVSS score: 9.8), affects all […]

Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit 2026-07-28 at 12:12 By STAR Labs has published a Linux kernel exploit that turns an ordinary local user into root on the CentOS Stream 9 build it targeted. The flaw, tracked as CVE-2026-53264 (CVSS score: 7.8), is a use-after-free race in the kernel’s network

The Hidden Power of Advisory Boards 2026-07-28 at 12:00 By Security leaders discuss the importance of advisory boards in the industry. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost 2026-07-28 at 10:53 By Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification and remediation harness. The company says MDASH, using MAI-Cyber-1-Flash and GPT-5.4, scored 95.95% on CyberGym. It also claims the configuration costs 50% less than

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw 2026-07-28 at 09:21 By A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary