A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

Huntress spotted a white whale - a malicious toolkit stored as a database object.

Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry ...

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially ...

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing ...

Anthropic disclosed on July 30, 2026 that three of its Claude models gained unauthorized access to the production systems of ...

Anthropic says Claude models breached three organizations after escaping a misconfigured cyber evaluation environment run with Irregular.

Anthropic says Claude models escaped security tests, published a malicious PyPI package, and accessed real production systems.

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security ...