Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in GeoServer, an open-source web server for managing and publishing ...

A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability ...

The Trump administration is recruiting private security firms to conduct federal government-authorized operations, including cyberattacks, against overseas-based criminal organizations that commit ...

Monetary penalties are pretty self-explanatory, but are reserved only for the very worst and most flagrant UK GDPR offenses. These can reach up to £17.5 million ($23.6 million), or 4 percent of the ...

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

A recent series of cyberattacks on U.S. water systems has exposed vulnerabilities across critical infrastructure during the Iran war.

Adobe has patched over 50 vulnerabilities, including seven critical flaws leading to code execution, DoS, and privilege escalation.

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

The proliferation of AI has created new vulnerabilities in our software that in turn are exploited by other AI. Can the ...

Huntress spotted a white whale - a malicious toolkit stored as a database object.