Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

Huntress spotted a white whale - a malicious toolkit stored as a database object.

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially ...

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing ...

Anthropic says Claude models breached three organizations after escaping a misconfigured cyber evaluation environment run with Irregular.

Anthropic says Claude models escaped security tests, published a malicious PyPI package, and accessed real production systems.

A Colorado research team has created experimental osteoarthritis treatments that appear to regenerate damaged joints rather than just relieve pain. In animal studies, a single injection restored ...

A chatbot-based vulnerability scanner that helps users identify and resolve common web application security issues such as SQL Injection, Cross-Site Scripting (XSS), open ports, and more. It provides ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based ...