Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

This week’s cybersecurity recap covers rogue AI behavior, an exploited Metabase zero-day, MCP supply-chain attacks, router backdoors, and more.

As AI increasingly accelerates and individualizes cyberattacks, cracks in security leaders’ foundational defensive strategies ...

Anthropic says 3 Claude models breached real organizations after misconfigured CTF evaluations exposed them to the open internet and production system ...

After fracking waste from one disposal well was found to have moved underground for miles, residents in southeastern Ohio say the leak signals a threat to Marietta's drinking water. The fears now ...

Doctors are celebrating the "unprecedented" trial results of a cancer treatment that's managed to eliminate tumors in some patients who have proven resistant to other treatments. The injection, called ...

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week. The content management system (CMS) project published a PSA on May ...

While GLP-1 weight loss meds have been a mainstay in pop culture for a few years now, they're potentially about to get even more widespread. Formerly only available as an injection, Wegovy recently ...

Something strange happened at University of California campuses this fall. For the first time since the dot-com crash, computer science enrollment dropped. System-wide, it fell 6% last year after ...

In this interview, law professor Corinna Barrett Lain discusses her book “Secrets of the Killing State,” which exposes the troubling realities behind lethal injection as a method of execution. Lain, a ...