Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, ...

Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in GeoServer, an open-source web server for managing and publishing ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Discover the top 7 open-source penetration testing tools tailored for DevOps teams in 2026. Enhance security and streamline testing within your Continuous Integration/Continuous Deployment (CI/CD) ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Microsoft has released fresh security patches to resolve critical vulnerabilities in Azure, Entra ID, Exchange, and Fabric.

Ledger, Trezor, SafePal and Coldcard have all disclosed incidents since January. Here's every hardware wallet breach of 2026, ...

Adobe corregge cinque famiglie di prodotti: tre falle in ColdFusion e Campaign Classic hanno CVSS 10,0.

Google mostra como proteger agentes feitos com o Agent Development Kit contra prompt injection usando Cloud KMS, gVisor e gateways determinísticos.

Ivanti has patched four vulnerabilities, including two high-severity EPM flaws exploitable remotely without authentication.