Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

Replayable AI reasoning blocks let researchers recover API keys and passwords from public logs; they say the main extraction attack is now mitigated.

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

We are seeking a highly skilled Senior Test Automation Engineer with strong hands-on experience in Playwright, TypeScript, and JavaScript to drive automation excellence across enterprise platforms.

LexisNexis took its Diligence, Metabase API, and Newsdesk services offline last week after detecting "unusual activity on ...

GitGuardian found 321 n8n instances accepting leaked GitHub tokens that could expose workflows, data, and downstream ...

Version 3 release helps manufacturers proactively identify operational issues, deploy AI agents and connect to CESMII's new ...

Snyk brought Evo Continuous Offensive Security to general availability at Black Hat USA 2026, adding an autonomous, AI-powered penetration testing ...

A critical Gremlin API vulnerability exposed a path to any Cosmos DB instance, including Microsoft’s own services, before the company redesigned the platform.

A two-person Brisbane company reckons the answer is a smaller box, used properly. On a modest 8-core CPU VM, a machine most ...

Azure Cosmos DB vulnerability CosmosEscape let any attacker with a standard account break out of Microsoft's Gremlin sandbox, retrieve a platform-wide signing key, and access every customer database ...

Invicti Security, a leader in web application and API security, today announced Invicti Agentic Pentest, a new approach to penetration testing that combines autonomous AI reasoning with Invicti's ...