Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in GeoServer, an open-source web server for managing and publishing ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Security and networking appliances now represent the most consistently targeted category of enterprise technology for zero-day exploitation. The devices organizations buy to defend the perimeter have ...

Ledger, Trezor, SafePal and Coldcard have all disclosed incidents since January. Here's every hardware wallet breach of 2026, ...

Legal AI solutions provider LexisNexis shut down Diligence, Newsdesk, and Metabase API data services following a cyber attack ...

Monetary penalties are pretty self-explanatory, but are reserved only for the very worst and most flagrant UK GDPR offenses. These can reach up to £17.5 million ($23.6 million), or 4 percent of the ...

Ivanti has patched four vulnerabilities, including two high-severity EPM flaws exploitable remotely without authentication.

Artificial intelligence has transformed cybersecurity with its speed and scale, with AI increasingly identifying ...

Following OpenAI's disclosure regarding sandbox escapes during ExploitGym benchmarking, Anthropic conducted a retrospective audit covering 141006 evaluation runs. The investigation evaluated ...

Hardware wallet manufacturer Trezor disclosed a data breach affecting nearly 14,000 of its customers after ShipMonk, its shipping and logistics provider, was hacked ...

Oblique night view of the Microsoft office entrance showing the colorful corporate logo and building facade in Ixelles in Brussels Capital Region in Belgium on December 16, 2024. AFP via Getty ...