Metabase says a CVSS 10.0 zero-day SQL injection was exploited in the wild; the flaw can grant admin access and expose connected database data.

A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Artificial intelligence has transformed cybersecurity with its speed and scale, with AI increasingly identifying ...

Spread the love“`html If you’re a developer spending any significant amount of time wrangling data, you’ve likely felt the ...

SQL Server 2025 gives developers new ways to work with text, JSON, real-time data changes and AI-ready vector data. Microsoft MVP Leonard Lobel explains why he considers it the most significant SQL ...

More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface. For at least a third ...

HISA will require a password change for all online portal users amid an ongoing investigation into owner Marshall Gramm.

Many privacy-concerned users understand why changing their IP address and DNS servers on Windows 11/10 operating systems is critical. It’s problematic when that’s not possible. If you encounter this ...

Minecraft is one of the most enduringly popular games on Earth, with over 212 million active monthly players. The beloved video game even has a recent film adaptation. This popularity stems largely ...

Huntress spotted a white whale - a malicious toolkit stored as a database object.