Spread the loveOn October 21, 2026, the cybersecurity world collectively held its breath. Two critical remote code execution ...

Since September 2026, companies have been announcing unauthorized access and personal information leaks one after another.

SQL injection is a vulnerability known for so long that it is always featured in introductory security books. Yet, it remains ...

Deception is moving at machine speed. Learn to keep pace. Huntress recently observed three web servers compromised via a vulnerability in a popular web-based recreation management software platform ...

SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hive Metastore APIs to read, modify, or ...

Your AI agent did exactly what it was designed to do. The framework underneath it just handed an attacker a shell on the box that holds your OpenAI key, your database credentials, and your CRM tokens.

Liquid Clustering is the data layout for open table formats that outperforms partitioning while sidestepping its limitations 8 common myths keep teams tied to partitioning, and none of them hold up ...

Microsoft is publishing 137 vulnerabilities on May 2026 Patch Tuesday. Microsoft is not aware of exploitation in the wild or public disclosure for any of these vulnerabilities. So far this month, ...

An SQL injection attack happens when someone passes malicious data values to Microsoft SQL Server in a query string. Those values can cause lots of damage in a database. SQL injection can occur if you ...

A persistent threat actor known as Larva-26002 has been continuously targeting poorly managed Microsoft SQL (MS-SQL) servers, this time deploying a new scanner malware called ICE Cloud Client. The ...

The report provides an overview on tactics, techniques, and procedures (TTPs) of The Gentlemen observed by Group-IB in intrusions conducted by its affiliates, as well as relevant information about the ...