Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

Panel patches CVE-2026-58048, which could let authenticated customers run SQL as database root and, in some setups, ...

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

HashiCorp, Veeam, and Django patch 11 flaws, including cross-tenant token reuse, agent credential exposure, and possible code ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Adobe has patched over 50 vulnerabilities, including seven critical flaws leading to code execution, DoS, and privilege escalation.

By chaining an SQL injection and an API vulnerability, attackers can inject code. WordPress has released an update, the finders a hotfix.

Development environments have evolved into toolkits for directing coding models and coordinating agents. GitHub Copilot, ...

BSides Las Vegas 2026 spent three days making the case that AI coding tools are supply chain attack targets. ChainDrop, a ...

Because 'trust me' isn't a permission model for your AI coding agent.

SKYX Reports over $27.7 Million in Cash and Cash Equivalents as of June 30, 2026, Management Believes It Has Sufficient Cash to Achieve Its Goals ...

Pakistan’s National CERT has warned of critical WordPress flaws that could let hackers take control of websites and urged organizations to patch them immediately.