Hackers abused a Microsoft SQL Server to run commands, steal credentials and source code, and move files in a Viva Aerobus-linked attack.

Roundcube Webmail SQL injection flaw CVE-2026-48842 is actively exploited, urging users to update vulnerable installations.

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of ...

The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query ...

Threat actors are actively exploiting a critical SQL injection vulnerability in Roundcube Webmail that can be triggered without authentication.

A 16-year-old security researcher known as Faav has disclosed a critical authentication flaw in Microsoft’s internal Titan ...

AI agents probing US and Canadian gov sites made SQL injection attempts while seeking data, but investigators found no ...

With each year, technology grows more mainstream and as such, cybersecurity grows in demand. This paper aims to explore the ...

Threat actors have been exploiting a high-severity vulnerability in Roundcube, the popular open source webmail client, the Canadian Centre for Cyber Security warns. Tracked as CVE-2026-48842 (CVSS ...

A group of OpenAI-powered agents apparently bypassed restrictions in their own operating environment to ...

Canadian government websites proved that they can withstand attempted hacking attempts that are powered by artificial ...

Teenager cracks open Microsoft database with 17 trillion total rows and 25,000 user accounts — lack of JWT token validation ...