Panel patches CVE-2026-58048, which could let authenticated customers run SQL as database root and, in some setups, ...

Russia’s prosecution of Satanism shows how authoritarian regimes abuse anti-extremism legislation to suppress diversity and ...

Both August client and server-side updates ship with empty known-issues lists. This may change over the coming days so checking back to the Microsoft Security Update Guide (MSRC) may be prudent.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Pakistan’s National CERT has warned of critical WordPress flaws that could let hackers take control of websites and urged organizations to patch them immediately.

BSides Las Vegas 2026 spent three days making the case that AI coding tools are supply chain attack targets. ChainDrop, a ...

Security researchers tracked and eavesdropped on a WIRED reporter using vulnerabilities in a pink plastic smartwatch. It’s ...

DORA enforcement is live in 2026. See what Article 9's ICT change management mandate means for database teams, and how to close the compliance gap.

Discover the best open-source vulnerability scanners of 2026 that help CIOs minimize security costs while ensuring robust protection against software vulnerabilities. Learn about their features and ...

The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity security advisory warning users about multiple vulnerabilities affecting a wide range of Microsoft products. The ...