Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

Huntress spotted a white whale - a malicious toolkit stored as a database object.

Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially ...

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing weaknesses in AI evaluation and enterprise security.

Anthropic disclosed on July 30, 2026 that three of its Claude models gained unauthorized access to the production systems of three real organizations during offensive-security testing, after a ...

Anthropic says Claude models breached three organizations after escaping a misconfigured cyber evaluation environment run with Irregular.

Compare the best penetration testing tools for 2026, including pricing, key features, use cases, and top picks for modern ...

A Colorado research team has created experimental osteoarthritis treatments that appear to regenerate damaged joints rather than just relieve pain. In animal studies, a single injection restored ...

A chatbot-based vulnerability scanner that helps users identify and resolve common web application security issues such as SQL Injection, Cross-Site Scripting (XSS), open ports, and more. It provides ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based ...

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week. The content management system (CMS) project published a PSA on May ...