Panel patches CVE-2026-58048, which could let authenticated customers run SQL as database root and, in some setups, ...

A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.

Metabase says a CVSS 10.0 zero-day SQL injection was exploited in the wild; the flaw can grant admin access and expose ...

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

Development environments have evolved into toolkits for directing coding models and coordinating agents. GitHub Copilot, ...

A critical Gremlin API vulnerability exposed a path to any Cosmos DB instance, including Microsoft’s own services, before the company redesigned the platform.

Discover the best open-source vulnerability scanners of 2026 that help CIOs minimize security costs while ensuring robust protection against software vulnerabilities. Learn about their features and ...

Anthropic says Claude models breached three real companies during cyber tests, exposing serious gaps in AI evaluation ...

BSides Las Vegas 2026 spent three days making the case that AI coding tools are supply chain attack targets. ChainDrop, a ...

Modular laptop maker Framework has warned customers that an attacker exploited a zero-day at analytics provider Metabase to access names, email addresses, phone numbers, physical addresses, and login ...

Spread the loveWhen you’re diving into the world of project management with Microsoft, you’ll quickly discover a couple of ...