Metabase says a CVSS 10.0 zero-day SQL injection was exploited in the wild; the flaw can grant admin access and expose ...

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

GitGuardian found 321 n8n instances accepting leaked GitHub tokens that could expose workflows, data, and downstream ...

Snyk brought Evo Continuous Offensive Security to general availability at Black Hat USA 2026, adding an autonomous, AI-powered penetration testing ...

A critical Gremlin API vulnerability exposed a path to any Cosmos DB instance, including Microsoft’s own services, before the company redesigned the platform.

Wiz Research disclosed Wednesday that a chain of vulnerabilities in Azure Cosmos DB's Gremlin query engine — which the firm named CosmosEscape — allowed any attacker with a standard Cosmos DB account ...

Tines 3B is a fantastic platform for developers and vibe-coders alike, and its unique approach is the best I've seen yet.

An AI uncovered a $500,000 WordPress exploit in 10 hours for $25, raising bigger concerns about how cheaply serious ...

A new ransomware strain scans specifically for AI model weights, and it has no way to collect a ransom, leaving victims ...

WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated ...

Microsoft's 2026 lifecycle schedule includes major support deadlines for Windows, Office, SQL Server, SharePoint, and Azure services.

The Bun team has released version 1.2.21 of its JavaScript bundler and runtime, written in Zig, adding features including built-in drivers for MySQL and SQLite, a YAML parser, and a secrets manager ...