Metabase SQLi Zero-Day Exploited
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks, breaching customer instances and impacting Framework and Tally.
Most bot-management vendors publish no price at all. We collected every figure that is actually on the record — DataDome, AWS WAF Bot Control, reCAPTCHA, hCaptcha, Cloudflare and Imperva — plus the four cost traps that sit behind the headline numbers.
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks, breaching customer instances and impacting Framework and Tally.
A Canadian man pleaded guilty to playing a central role in the widespread compromise of over 165 Snowflake customer environments, resulting in massive data theft for extortion.
A recent wave of cyberattacks targeting hedge funds and private-equity firms has been linked to UNC6671, an extortion group associated with the BlackFile threat actors.
Multiple cybersecurity companies made significant announcements at Black Hat USA 2026, including 1Password, Cogent, and Vectra AI, showcasing new products and services to enhance security posture.
Irregular, a cybersecurity evaluation firm, has declined to say whether other clients were affected by the same flaw that compromised AI models from Anthropic, OpenAI, and Meta.
A weekly roundup of cybersecurity news, including AI-generated false positives, data breaches, and hacking attacks on major companies.
Researchers have discovered a new TONTOU CPU attack that bypasses Spectre v2 fixes and leaks Linux password hashes, affecting AMD and Intel processors.
Zenity researchers demonstrate zero-click AI browser hacking techniques targeting Claude and ChatGPT Atlas, enabling account takeovers and unauthorized actions.
TeamPCP, a threat actor behind numerous open-source software attacks, has been active since 2020, exploiting AI infrastructure and open-source frameworks to compromise over 1,000 software packages.