Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

In a Ghostjacking attack, an AI agent executes instructions planted in the log that records a blocked request word for word.

A bad browser extension can be a security nightmare. If it's been hijacked by a bad actor, your personal data may be at risk.

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

Testing contractor says incident resulted from evaluation-environment error, not sandbox escape or sophisticated cyberattack | Anadolu ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Snyk brought Evo Continuous Offensive Security to general availability at Black Hat USA 2026, adding an autonomous, AI-powered penetration testing ...

For the third year in a row, prompt injection tops the OWASP GenAI / LLM Top Ten list issued today as being the most ...

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...

Application security has become one of the most important areas in modern software development. Companies no longer ...

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing ...