Metabase SQLi zero-day exploited in customer data-theft attacks
…The SQLi vulnerability has been fixed in patched versions for all affected branches from 0.58 through 0.63, with the minimum safe releases being 0.58.24, 0.59.21, 0…
Search
Top stories
Microsoft confirms patching issues in restricted Windows networks
…updates released in March, April, or later months," Microsoft said in a service alert first spotted by Microsoft MVP Susan Bradley. "This issue results from recent changes in download timeout requirements when…
Hermes AI agent used to automate attack on Thai Finance Ministry
…The researchers linked the initial server to additional attacker-controlled infrastructure by shared TLS certificates used during the same time period. "In addition to the common name, all these certificates share a…
Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026
…On the first day , Orange Tsai earned another $175,000 for a Microsoft Edge sandbox escape chaining 4 logic bugs, Windows 11 was hacked 3 times, and Valentina Palmiotti (chompie) of IBM…
Google: Hackers used AI to develop zero-day exploit for web admin tool
…Google notified the software developer about the significant threat and timely action to disrupt the attack. “For the first time, GTIG has identified a threat actor using a zero-day exploit that…
Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion
…The Mechanics of "Slopsquatting" and Machine Ingestion Large language models (LLMs) recommend software libraries based on statistical probability and historical code patterns, not real-time package registry verification. When a model suggests…
New Linux 'Dirty Frag' zero-day gives root on all major distros
…Because it is a deterministic logic bug that does not depend on a timing window, no race condition is required, the kernel does not panic when the exploit fails, and the success…
Hackers Are After the Gaps in Your Vulnerability Program: Here's Their Playbook
…Offer the finding on the underground markets. "Hercules" even suggests that an actor could approach the victim and sell the information elsewhere at the same time. Exploit the vulnerability and detect what…
Software Is Now Written at the Speed of Thought. Security Isn't.
…What began as a textbook engineering discipline governed by documentation and sequential milestones has transformed into an increasingly dynamic process where ideas can become functioning applications in real time. The journey from…
Palo Alto Networks firewall zero-day exploited for nearly a month
…Series firewalls. "We are aware of only limited exploitation of CVE-2026-0300 at this time. Unit 42 is tracking CL-STA-1132, a cluster of likely state-sponsored threat activity exploiting…