James Bennett of Liquibase walks through a live demo of targeted rollback, undoing one bad database change without a full restore or risky fix forward.

August’s Patch Tuesday is a big one: 751 fixes, an exploited WinSock flaw and plenty of critical Windows, Office and Exchange issues.

Oblique night view of the Microsoft office entrance showing the colorful corporate logo and building facade in Ixelles in Brussels Capital Region in Belgium on December 16, 2024. AFP via Getty ...

Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in GeoServer, an open-source web server for managing and publishing ...

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

Adobe has patched over 50 vulnerabilities, including seven critical flaws leading to code execution, DoS, and privilege escalation.

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.

Attackers are currently exploiting a critical security vulnerability in the business intelligence platform Metabase. Admins ...

Password researchers found LLM-generated fixes often overlooked root causes, architectural context, and long-term security ...

Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry ...

LLMs became reliably good at writing SQL only six or nine months ago. Soon agents will handle boring data tasks, but ...