ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “teamcenter”

31 stories

Searchkeywordsmart
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 4Advisory 2Exploit / PoC 2Industry 1
SeverityAllcritical 4high 2medium 2low 1info 0

Smart search ranks by meaning as well as keywords (one row per story, last 45 days).

Siemens Teamcenter

Reflected XSS in Siemens Teamcenter /auth/ redirect flow lets unauthenticated attackers inject JavaScript into authenticated sessions (CVE-2026-58113).

CISA republished Siemens advisory SSA-157465 for CVE-2026-58113, a reflected cross-site scripting flaw (CVSS 6.1) in the /auth/ authentication redirect flow of Siemens Teamcenter V2412, V2506, V2512, and V2606. An unauthenticated attacker can craft a URL that injects arbitrary JavaScript into an authenticated user's browser, enabling data theft or actions within the victim's Teamcenter session. Fixed versions are available for all affected releases; Enzo Alvarez of Bishop Fox reported the vulnerability.

CISA Advisories · 1d agoAdvisoryCVE-2026-58113

[Control Systems] Siemens security advisory (AV26-890)

Canada's Cyber Centre relayed a Siemens advisory affecting Reyrolle 7SR5, Teamcenter, Siveillance Control, Desigo CC and other products.

Advisory AV26-890, dated September 8, 2026, flags Siemens vulnerabilities in Reyrolle 7SR5 (versions prior to V2.70), Teamcenter, Siveillance Control, SIMATIC AX Runtime, Desigo CC, Industrial Edge Management, and SIMOVE Fleetmanager and SIPLANT across multiple versions and models. The Cyber Centre encourages users and administrators to review the Siemens advisory and apply available updates. No specific CVEs or exploitation details are provided in the relayed advisory.

Canadian Centre for Cyber Security · 8d agoAdvisory

TeamViewer security advisory (AV26-852)

Canada's Cyber Centre warns that multiple TeamViewer client products are affected by vulnerabilities, urging users to update to 15.64.7 or later.

Advisory AV26-852, dated August 26, 2026, reports vulnerabilities in TeamViewer Full Client, Host, and QuickSupport across multiple versions and platforms, and in Portable prior to 15.64.7. The Canadian Centre for Cyber Security encourages users and administrators to apply the necessary updates, referencing TeamViewer security bulletins TV-2026-1008 and TV-2026-1009. No exploitation details are provided in the advisory.

Canadian Centre for Cyber Security · 21d agoAdvisory

ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws

September ICS Patch Tuesday brings critical fixes from Schneider Electric, Siemens, and Aveva, including CVSS 9.2 authentication flaw CVE-2026-3869 in Modicon M580 controllers.

Schneider Electric's September advisories include a critical authentication vulnerability, CVE-2026-3869 with a CVSS score of 9.2, in Modicon M580 and Modicon M580 Safety controllers, plus high-severity bugs in PowerLogic T300 and EcoStruxure IT Data Center Expert. Siemens published nine new advisories, four rated critical across Reyrolle 7SR5, Open Interface Services, Industrial Edge Management, and SIMOVE Fleetmanager and SIPLANT, and began rolling out fixes for CVE-2026-31431, a 7.8-rated Linux kernel flaw enabling root shell access. Aveva disclosed four flaws in Pipeline Integrity Monitor's PIMBoards, including a hardcoded encryption key and MD5-hashed passwords, plus an unsafe deserialization issue in Enterprise SCADA. Rockwell Automation separately issued nine advisories covering RSLinx Classic and multiple controller products.

SecurityWeek · 7d agoVulnerabilityCVE-2026-3869CVE-2026-31431

The best human hacking team still out-solved the best AI team

Hack The Box 2026 benchmark data shows AI agents helped top teams but human-only teams still solved everything while best AI teams stalled at 32 of 36 challenges.

At the 2026 Global Cyber Skills Benchmark (Project Nightfall) run by Hack The Box, 93 designated AI agent accounts across 54 teams held 2.7% of registered accounts but produced 4.2% of submitted flags and 4.6% of awarded points, and appeared in 17 of the Top 25 finishers. Median solve time dropped from 26 hours in 2024 to 13.8 hours in 2026, though the data cannot attribute the change to AI. At the November 2025 NeuroGrid CTF, AI-augmented teams solved challenges 3.2x faster overall but only 1.69x among the Top 5%, and the only team to complete all 36 challenges was human, while the best AI team stopped at 32.

Help Net Security · 20d agoResearch

Critical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077 ...

JetBrains fixed critical unauthenticated RCE CVE-2026-63077 in TeamCity On-Premises; update to 2025.11.7 or 2026.1.3.

JetBrains disclosed CVE-2026-63077, a critical unauthenticated remote code execution vulnerability affecting all TeamCity On-Premises versions. An attacker with HTTP(S) access can bypass authentication checks via the TeamCity agent polling protocol and execute arbitrary operating system commands with the privileges of the server process. Fixes are available in versions 2025.11.7 and 2026.1.3, plus a security patch plugin for TeamCity 2017.1+. JetBrains states there is no evidence of active exploitation at disclosure time, and TeamCity Cloud is already mitigated.

Web discovery (articles for new exploits & KEV entries) · 8d agoVulnerabilityCVE-2026-63077

How RingCentral builds AI-native work from engineering to ops

OpenAI's case study describes RingCentral using ChatGPT Work and Codex to accelerate AI product development and centralize operational intelligence across engineering and operations.

OpenAI published a customer story on RingCentral's adoption of ChatGPT Work and Codex. RingCentral reportedly uses the tools to speed up AI product development and centralize operational intelligence across engineering and operations. The post is promotional rather than technical and describes no security incidents.

OpenAI News · Aug 12, 2026AI industry

Australia Warns of Active Exploitation of Critical TeamCity Server Flaw

Australian officials warn of active exploitation of a critical JetBrains TeamCity flaw and urge customers to patch immediately.

Australian authorities warn that a critical vulnerability in JetBrains TeamCity is being actively exploited and urge customers to apply patches. The alert follows a similar warning from the US government. TeamCity is a widely deployed CI/CD server whose past flaws have been leveraged in large-scale exploitation campaigns.

Infosecurity Magazine · 22d agoExploit / PoC in the wild

Give every teammate and agent the right level of access to your Workers

Cloudflare launches per-Worker granular access controls with four roles, enabling least-privilege access for teammates, AI agents, and CI/CD pipelines.

Cloudflare announced granular authorization for Workers, letting admins scope access to a single Worker instead of the whole account. Four new roles are available: Metadata Read-Only (observability without source code), Content Read-Only (read code without changes), Editor (deploy without delete), and Admin (full control of one Worker). Roles apply at Developer Platform, product, or resource level, can be attached to dashboard users or API tokens, and are available to all customers now, with plans to extend to D1, R2, and KV.

Cloudflare Blog · 1d agoTools

Inside Meta’s push to put robots to work in data centers

Meta is testing robots to perform technician tasks in its data centers, advancing automation of AI infrastructure operations.

Meta is testing robots to perform tasks currently done by human technicians in its data centers. The push signals ambitions to automate AI infrastructure operations at scale. The excerpt provides no details on robot suppliers, deployment scale, or timelines.

Ars Technica · AI · 17d agoAI industry

The complex corporate web behind a $3.2 billion AI data center

Ars Technica probes diffuse accountability behind TeraWulf's $3.2B Lake Mariner AI data center after a June fire exposed safety and job gaps.

A June fire at the Lake Mariner data center in Somerset, New York exposed missing alarms, a nonfunctioning suppression system, and dry hydrants, highlighting how responsibility is split across TeraWulf (owner-operator), Fluidstack (operator), Google (lease guarantees and equity warrants), and Anthropic (compute customer). The article details local concerns over the gap between promised 165 permanent jobs and a projected 35-40, socialized grid costs, and Governor Hochul's moratorium on hyperscaler development. Anthropic's February 2026 pledge to cover electricity price increases applies to the site but leaves other commitments unverified.

Ars Technica · AI · 9d agoAI industry

Coding Agents Have Converged: Why the SWE-bench Leaderboard Can No Longer Order Its Top Entries, and What to Measure Instead

Audit of 254 SWE-bench submissions finds top coding-agent entries statistically inseparable, so small leaderboard gaps no longer establish rank.

The paper audits 254 SWE-bench submissions across four splits without running models. On Verified, the top two entries each resolve 396 of 500 instances, and exact paired McNemar tests separate none of the 29 adjacent top-thirty pairs at alpha=0.05. Within-model scaffold score ranges reach 29.8 percentage points, versus an 8.8-point spread among the top thirty. The authors release a five-step audit protocol and recommend reporting comparison-set-specific resolution and model-scaffold provenance.

arXiv cs.AI / cs.LG / cs.CL · 1d agoAI research

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Unit 42 details the Spring Ring voice phishing campaign abusing Microsoft Teams to deploy malware and target enterprise domain controllers.

Palo Alto Networks Unit 42 analyzed the Spring Ring campaign, which abuses Microsoft Teams and voice phishing (vishing) to compromise enterprise users. Attackers use Teams calls to social-engineer victims, then deploy malware and advance toward enterprise domain controllers. The report documents the campaign's tactics and provides detection guidance for defenders.

Palo Alto Unit 42 · 16d agoPhishing & fraud in the wild

Update your firewall rules: Teams and Copilot are changing address

Microsoft is redirecting Microsoft 365 and Teams web users to new *.cloud.microsoft domains, requiring firewall and proxy rule updates by early October.

Starting September 2026, Microsoft is redirecting M365 web users to copilot.cloud.microsoft and Teams web users to teams.cloud.microsoft, announced via MessageCenter posts MC1465764 and MC1462915. All redirects should complete by early October 2026, with limited Teams exceptions possible until December 31, 2026. Microsoft advises reviewing client, proxy, firewall, and secure web gateway configurations, and suggests using TenantRestrictions to control personal Microsoft account access instead of blocking the new Copilot address.

CSO Online · 5d agoAdvisory

τ^τ-Bench: An Environment for End-To-End, Realistic Agent Construction

New τ^τ-bench tasks coding agents with building deployable customer-service agents; best config, Claude Opus 5, passes only 23.9% of simulations.

Researchers introduce τ^τ-bench, an end-to-end benchmark where a developer agent must build a complete customer-service agent from real business records, a client with requirements, a production API, an inherited codebase, and cost/model limits, then is scored by deploying it against held-out simulated users. Across 53 tasks in four domains, the strongest configuration, Claude Opus 5 under Claude Code, passes just 23.9% of evaluation simulations versus an 82.2% expert-authored reference ceiling. Failure modes mirror those of human developers: shallow queries instead of deep record comprehension, almost no client communication, and shipping the first architecture that runs rather than experimenting.

Hugging Face daily papers · 13d agoAI research

What Does an LLM-Agent Leaderboard Rank Actually Compare?

A methodological study shows close LLM-agent leaderboard rank gaps on SWE-bench and similar benchmarks often do not support superiority claims.

The paper defines an estimand-aware pairwise procedure for comparing agents, checking common support and applying explicit uncertainty rules and practical margins. Across SWE-bench, AgentRewardBench, and tau2-bench, close rank differences are frequently unresolved, and proxy labels or utility rules can change which system is selected. The authors argue a leaderboard score summarizes a released evaluation but does not by itself justify pairwise superiority conclusions.

arXiv cs.AI / cs.LG / cs.CL · 9d agoAI research

Threat Gang 'Springs' Vishing Attacks on Microsoft Teams Users

The 'Spring Ring' operation uses vishing attacks against Microsoft Teams users to hijack sessions, deploy malware, and take over infrastructure.

Dark Reading reports on the Spring Ring threat gang conducting voice-phishing (vishing) attacks against users of Microsoft Teams. The operation aims to compromise collaboration-suite accounts to gain remote access to victim sessions, distribute malware, and potentially seize control of infrastructure. Further technical details were not provided in the available text.

Dark Reading · 14d agoPhishing & fraud1

Occamy-1.0: Open Pareto-frontier 35B Intelligence for Co-work

Occamy-1.0 releases open 35B weights post-trained from Qwen3.6-35B-A3B, targeting cost-efficient co-work agents at Pareto-frontier pricing.

Occamy-1.0 is a cost-efficient co-work agent model built by further training the post-trained Qwen3.6-35B-A3B checkpoint, using execution-grounded data, replayable long-horizon trajectories across multiple harnesses, and staged post-training. It consistently ranks among the strongest comparably sized models across co-work benchmarks and remains competitive with substantially larger frontier systems on several tasks. Its aggregate performance across four representative benchmarks places it at the low-cost knee of the observed cost-performance Pareto frontier, while preserving tool calling, coding, and instruction following capability. The model weights and a subset of training data are publicly released.

Hugging Face daily papers · 13d agoModel release

AgentGrad: Intervention-guided Prompt Optimization for Multi Agent Systems

AgentGrad introduces intervention-guided prompt optimization for LLM multi-agent systems, achieving state-of-the-art results with 2.5x faster optimization.

AgentGrad is a prompt optimization framework for LLM-based multi-agent systems that addresses limitations in textual gradient extraction and aggregation. It uses sequential intervention to identify the agent whose prompt modification resolves a given failure, then applies agent-level supervision and semantic gradient clustering to build generalized gradients. Experiments report state-of-the-art performance across five MAS benchmarks and a 2.5x average reduction in wall-clock optimization time versus the next-fastest baseline.

Hugging Face daily papers · 9d agoAI research

Microsoft Teams Has Become a Haven for Scammers in China

Scammers in China are exploiting Microsoft Teams and Webex to trick Chinese victims into transferring large sums of money.

WIRED reports that fraudsters are abusing enterprise chat platforms including Microsoft Teams and Cisco Webex to run scams against victims in China. Victims are socially engineered into transferring large sums of money. The campaign has generated a wave of complaints, highlighting how scam groups abuse legitimate business communication tools.

WIRED · Security · 19d agoPhishing & fraud in the wild

Teams calls are about to get a lot harder to fake

Microsoft will roll out Brand Impersonation Protection in Teams Calling from mid-May 2026, warning users about suspicious inbound VoIP calls impersonating trusted brands.

Microsoft Teams Calling is gaining Brand Impersonation Protection, which evaluates inbound VoIP calls from first-time external callers for signs of brand impersonation and displays warnings before users answer high-risk calls. The feature rolls out from mid-May 2026 with completion expected by late May 2026, is enabled by default, and requires no administrative action. Users can accept, block, or end flagged calls, and alerts may continue throughout a call if suspicious activity persists. Microsoft recommends preparing helpdesk teams and updating security awareness materials ahead of deployment.

Help Net Security · 12d agoTools

Misleading the Planner through Deceptive Resumes: Registration-Time Injection in Centralized Multi-Agent Systems

Researchers demonstrate registration-time prompt injection in centralized LLM multi-agent systems, dropping GAIA task success from 84.31% to 37.25%, and propose DescGuard defense.

The paper identifies a registration-time injection channel in centralized LLM multi-agent systems where third-party worker agent descriptions are trusted by the planner before any user instruction arrives. Analyzing 32,000 descriptions from three public agent marketplaces, at least 23.35% contain content outside the four defined description fields. Eight description-manipulation attack strategies targeting task decomposition, capability grounding, and subtask specification cut GAIA task success from 84.31% to 37.25% and increased token consumption or execution time by over 111%, persisting across two MAS implementations, six planner LLMs, and four evaluators. The proposed DescGuard defense filters descriptions to worker-scoped interface information and restores metrics toward baseline without modifying workers, planner, or orchestration logic.

arXiv cs.CR · 2d agoAI safety & security

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks

Unit 42 details 'Spring Ring', a vishing campaign using fake IT support on Microsoft Teams to reach 150+ employees at 10+ companies.

Palo Alto Networks Unit 42 documented 'Spring Ring', a voice-phishing campaign that ran January to April 2026, using 26 attacker identities and fake Microsoft 365 tenants such as 'ITProtectionDepartment' to impersonate internal IT support on Microsoft Teams. One path used Quick Assist or downloaded remote-support tools to run an obfuscated PowerShell script that disabled malware scanning before contacting C2; the other delivered a cloud-hosted file triggering browser hijacking, SMB internal network scanning, and a PetitPotam NTLM relay attempt against domain controllers to gain domain-level privileges. Both intrusion attempts were blocked before attackers reached their objectives. Collaboration-platform phishing alerts rose to 42% of Unit 42's telemetry in early 2026, up from 30%.

Help Net Security · 15d agoPhishing & fraud in the wild

Webinar: The forgotten Google Workspace access that can lead to a breach

BleepingComputer and Material Security will host a September 23, 2026 webinar on breaches caused by forgotten third-party Google Workspace integrations.

BleepingComputer announced a live webinar on September 23, 2026, titled 'Breach autopsy: How fast-growing companies are breached through Google Workspace' in partnership with Material Security. Speakers include Rajan Kapoor, VP of Security at Material Security, and Rick Fitzgerald, President of Fireside Consulting LLC. The session will examine real documented Google Workspace breaches involving overly permissive third-party integrations, social engineering entry paths, first-hours breach response decisions, and high-value security controls for lean security teams.

BleepingComputer · 8d agoIndustry

Get closer to the game with Gemini and Pixel

Google's Gemini and Pixel partner with five global football clubs to add AI-powered features to the matchday fan experience.

Google announced partnerships between its Gemini AI and Pixel smartphone lines and five global football clubs. The collaboration aims to elevate the fan matchday experience through AI and smartphone technology. The announcement is primarily a consumer marketing effort rather than a security-relevant development.

Google · AI · Aug 17, 2026AI industry