Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

This week’s cybersecurity recap covers rogue AI behavior, an exploited Metabase zero-day, MCP supply-chain attacks, router backdoors, and more.

Huntress spotted a white whale - a malicious toolkit stored as a database object.

Anthropic says 3 Claude models breached real organizations after misconfigured CTF evaluations exposed them to the open internet and production system ...

After fracking waste from one disposal well was found to have moved underground for miles, residents in southeastern Ohio say the leak signals a threat to Marietta's drinking water. The fears now ...

Doctors are celebrating the "unprecedented" trial results of a cancer treatment that's managed to eliminate tumors in some patients who have proven resistant to other treatments. The injection, called ...

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week. The content management system (CMS) project published a PSA on May ...

A critical SQL injection flaw in FortiClient EMS allows remote code execution and data exfiltration, leaving thousands of internet facing systems at risk. Yet another critical flaw in a Fortinet ...

While GLP-1 weight loss meds have been a mainstay in pop culture for a few years now, they're potentially about to get even more widespread. Formerly only available as an injection, Wegovy recently ...