Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Adobe has patched over 50 vulnerabilities, including seven critical flaws leading to code execution, DoS, and privilege escalation.

SCCM vulnerability 2026: XM Cyber researcher Omri Baso demonstrated that any enterprise employee with a standard Windows ...

Nearly 14,000 Trezor buyers had their names and contact details stolen after ShipMonk, the hardware wallet maker’s shipping ...

MAESTRO analysis of OpenAI and Anthropic incidents reveals how per-layer failures, not just the model, shaped security outcomes.

Nation-state grade iOS exploit chains Coruna and DarkSword are proliferating among cybercriminals, with 17,000 domains hosting variants.

Discover the best open-source vulnerability scanners of 2026 that help CIOs minimize security costs while ensuring robust protection against software vulnerabilities. Learn about their features and ...