August’s Patch Tuesday is a big one: 751 fixes, an exploited WinSock flaw and plenty of critical Windows, Office and Exchange issues.

A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability ...

Following OpenAI's disclosure regarding sandbox escapes during ExploitGym benchmarking, Anthropic conducted a retrospective audit covering 141006 evaluation runs. The investigation evaluated ...

Devart has earned recognition across five DBTA categories, highlighting strengths in administration, performance, ...

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, ...

Ivanti has patched four vulnerabilities, including two high-severity EPM flaws exploitable remotely without authentication.

Semgrep, a leading code security company, today announced a deepened partnership with Replit to bring automated, real-time security analysis directly into the AI-native development workflow.

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...