The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Panel patches CVE-2026-58048, which could let authenticated customers run SQL as database root and, in some setups, ...

Metabase says a CVSS 10.0 zero-day SQL injection was exploited in the wild; the flaw can grant admin access and expose ...

Russia’s prosecution of Satanism shows how authoritarian regimes abuse anti-extremism legislation to suppress diversity and ...

LLMs became reliably good at writing SQL only six or nine months ago. Soon agents will handle boring data tasks, but ...

Monetary penalties are pretty self-explanatory, but are reserved only for the very worst and most flagrant UK GDPR offenses. These can reach up to £17.5 million ($23.6 million), or 4 percent of the ...

Pakistan’s National CERT has warned of critical WordPress flaws that could let hackers take control of websites and urged organizations to patch them immediately.

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

Anthropic has admitted that its Claude AI accidentally hacked three real-world organisations during cybersecurity tests after a configuration error granted it internet access. The company states ...

Artificial intelligence has transformed cybersecurity with its speed and scale, with AI increasingly identifying ...

Anthropic has admitted that its Claude AI accidentally hacked three real organisations during cybersecurity testing after a setup error gave it internet access. The company says the incidents exposed ...

Security researchers tracked and eavesdropped on a WIRED reporter using vulnerabilities in a pink plastic smartwatch. It’s ...