Want to keep your website secure, but not sure how? This beginner-friendly guide covers the small-business-friendly hosting ...

Cisco patched nine critical flaws, including six rated CVSS 10.0, found during internal testing. None are known to be ...

Microsoft has released fresh security patches to resolve critical vulnerabilities in Azure, Entra ID, Exchange, and Fabric.

Important security updates have been released for Cisco BroadWorks, Crosswork Security, and Secure Workload, among others.

A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

Threat actors started exploiting an unpatched zero-day vulnerability in GeoServer hours after it was publicly disclosed, attack surface management firm WatchTowr says. The security defect, described ...

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Huntress spotted a white whale - a malicious toolkit stored as a database object.

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week. The content management system (CMS) project published a PSA on May ...