Metabase SQLi zero-day exploited in customer data-theft attacks
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.…
Latest Cybersecurity News — Page 2
View all →
18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Full Root on Host
A newly disclosed Linux kernel vulnerability, dubbed SCTPhantom and tracked as CVE-2026-64564, allows attackers to escalate from unprivileged local access to full root and even…
Google Chrome 151 Update Fixes 41 Security Vulnerabilities, Including 6 Critical Flaws
Google has released Chrome version 151.0.7922.108/.109 for Windows and macOS, and version 151.0.7922.108 for Linux. This update delivers 41 security fixes across various components of…
US fuel gauge exposure fell by more than half in three months
Every month for the better part of a year, about 4,800 US internet addresses answered a query in the protocol that fuel tank gauges speak.…
AI chat bots are sliding into League of Legends friend requests
Lina K., a co-worker, recently shared a firsthand account of how bots are adding League of Legends players via the Riot client friends list immediately…
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware…
Aussie Broadband actively exploring AI in customer service
Aussie Broadband is actively exploring AI as a handoff technology for routine and repetitive customer support requests. The telco has traditionally championed a human-centred ethos…
Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix
Black Hat — The National Motor Freight Traffic Association (NMFTA) says a 2024 safety recall for Bendix’s EC80 heavy-truck brake controller quietly fixed a set…
WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover
WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover Pierluigi Paganini August 07, 2026 WordPress XSS2Shell flaw enables admin takeover and remote code…
Experts say healthcare faces cybersecurity crisis: ‘These are patient safety issues’
Regulatory failures, funding constraints and industry consolidation have created serious hacking risks. Source link
More than half of AI-generated patches are broken
As AI-generated code continues to be injected into all corners of the internet, concerns have risen about an expanding attack surface for malicious hackers to…
Trojanized AI skills gain 1.7M installs in agent-targeted attack
For example, one skill called paperclip-board read: “If Paperclip is not installed or the server is not running yet, read skills/paperclip/references/setup-installation.md first. Clone the repo…