Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

LexisNexis took its Diligence, Metabase API, and Newsdesk services offline as part of its response to unusual activity on servers hosted and managed by an unnamed third-party vendor.

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

LexisNexis took its Diligence, Metabase API, and Newsdesk services offline last week after detecting "unusual activity on ...

Last month's incidents in which the AI model breached real-world systems derived from over-permissioning, especially with ...

Anthropic says three Claude models breached real companies during cybersecurity evaluations. Ordinary weaknesses, chained ...

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing weaknesses in AI evaluation and enterprise security.

Pakistan’s National CERT has warned of critical WordPress flaws that could let hackers take control of websites and urged organizations to patch them immediately.

Infometry launches business-context-aware conversational analytics for retail, helping retailers uncover what changed, ...

Databricks funding round: Databricks raised $5 billion at a $190 billion valuation after investors offered nearly 15 times ...

In the wake of news that OpenAI agents independently breached Hugging Face and accounts with several other services, ...

Website security is about protecting both the business and the people who trust that website with their information”— ...