Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

LexisNexis took its Diligence, Metabase API, and Newsdesk services offline last week after detecting "unusual activity on ...

A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

For the third year in a row, prompt injection tops the OWASP GenAI / LLM Top Ten list issued today as being the most ...

A critical Gremlin API vulnerability exposed a path to any Cosmos DB instance, including Microsoft’s own services, before the company redesigned the platform.

An AI uncovered a $500,000 WordPress exploit in 10 hours for $25, raising bigger concerns about how cheaply serious vulnerabilities can now be found.

The WP2Shell vulnerability chain affects over 500 million sites. How it was discovered says more about the future of cybersecurity than the bug itself. The post The $25 AI Exploit That Exposed A ...

Microsoft will end support or servicing for dozens of Windows, Office, server, and Azure products throughout 2026. Image: Ed Hardie/Unsplash Microsoft’s 2026 lifecycle schedule includes major support ...

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. AI is dramatically accelerating cyber threats, with attack breakout times now averaging just ...