Attackers breached an organization's Oracle database via a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit named…
cPanel has released a targeted security update to address a critical vulnerability that could allow authenticated hosting customers to execute SQL commands…
A now-patched vulnerability in Azure Cosmos DB could have allowed an attacker to escape the service's Gremlin query sandbox and gain full…
On July 23, 2026, Redis shipped seven security releases after researchers published authenticated remote code execution (RCE) proof-of-concept (PoC) exploits for stock…
Security firm Sysdig has identified what it believes is the first ransomware attack fully orchestrated by an AI agent, dubbed JADEPUFFER. The…
Oracle Database's embedded Java Virtual Machine and CREATE JAVA SOURCE feature were abused by attackers to compile and run post-exploitation code. The…
According to a new analysis by Intruder, 60% of organizations have at least one HTTP panel exposed, 49% have a risky port…