Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

Devart has earned recognition across five DBTA categories, highlighting strengths in administration, performance, ...

Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry ...

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Monetary penalties are pretty self-explanatory, but are reserved only for the very worst and most flagrant UK GDPR offenses. These can reach up to £17.5 million ($23.6 million), or 4 percent of the ...

A post-exploitation toolkit has been found compiled and stored inside an Oracle database as schema objects, giving attackers ...

A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.

CERT-In has flagged severe security flaws in Microsoft Teams, Office, and Azure services, warning users of potential data breaches and unauthorised system access.

Metabase says a CVSS 10.0 zero-day SQL injection was exploited in the wild; the flaw can grant admin access and expose ...

SIOS Technology Corp., a leading provider of application high availability (HA) and disaster recovery (DR) solutions, is releasing LifeKeeper v10.1-introducing AIOps-ready automation capabilities that ...