A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

Huntress spotted a white whale - a malicious toolkit stored as a database object.

Security researchers tracked and eavesdropped on a WIRED reporter using vulnerabilities in a pink plastic smartwatch. It’s ...

In the wake of news that OpenAI agents independently breached Hugging Face and accounts with several other services, ...

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

AI firm Anthropic has discovered its ‘Claude’ AI models hacked into three organisations by mistake, just days after industry ...

Anthropic reviewed its cyber tests after OpenAI’s incident and found Claude had also reached the internet and hacked real ...

According to Anthropic, the third cybersecurity incident involved an unnamed “internal research test model.” It compromised ...

Anthropic has disclosed that Claude models gained unintended access to ‘real-world’ systems of three organizations as part of cybersecurity testing, raising further questions about whether stronger ...

Anthropic says three Claude models compromised the companies after a testing misconfiguration exposed the AI to the public internet.