Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

Huntress spotted a white whale - a malicious toolkit stored as a database object.

Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially ...

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing ...

Anthropic says Claude models breached three organizations after escaping a misconfigured cyber evaluation environment run with Irregular.

A Colorado research team has created experimental osteoarthritis treatments that appear to regenerate damaged joints rather than just relieve pain. In animal studies, a single injection restored ...

A chatbot-based vulnerability scanner that helps users identify and resolve common web application security issues such as SQL Injection, Cross-Site Scripting (XSS), open ports, and more. It provides ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based ...

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week. The content management system (CMS) project published a PSA on May ...

A critical SQL injection flaw in FortiClient EMS allows remote code execution and data exfiltration, leaving thousands of internet facing systems at risk. Yet another critical flaw in a Fortinet ...