A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. Hackers exploited a SQL ...

Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in GeoServer, an open-source web server for managing and publishing ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted ...

Threat actors started exploiting an unpatched zero-day vulnerability in GeoServer hours after it was publicly disclosed, attack surface management firm WatchTowr says. The security defect, described ...

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

AI challenges all four questions in ways that require us to rethink our threat modelling practices. One of the most ...

The latest wp2shell vulnerability was one of the biggest WordPress security events in history. The critical vulnerability ...

AI-generated code is accelerating software development, but review processes are not keeping pace. Learn why enterprises need ...

Although there are a few ways to mitigate the risk, the only way to block it is to get AI to differentiate instructions from ...

Discover the top 7 open-source penetration testing tools tailored for DevOps teams in 2026. Enhance security and streamline testing within your Continuous Integration/Continuous Deployment (CI/CD) ...