Metabase SQL Zero-Day Exploited in Wild \u2014 Admin Access Without Authentication
Summary A critical zero-day vulnerability in Metabase, the popular open-source data analytics platform, is being actively exploited in the wild to gain administrative access without authentication. The vulnerability, assigned a…
Valve Notifies Steam Hardware Customers of a Data Breach
Summary Valve, the company behind the Steam gaming platform and Steam Deck hardware, has notified customers who purchased Steam hardware that a data breach has exposed their personal and payment…
North Carolina Ports Confirm Cyberattack Disrupting Operations
Summary North Carolina\u2019s port infrastructure has confirmed it was the target of a cyberattack that disrupted shipping and logistics operations. The port system \u2014 which handles a significant portion of…
LexisNexis Shuts Down Services After Suspicious Activity on Servers
Summary LexisNexis, one of the world\u2019s largest providers of legal, regulatory, and business information databases, proactively shut down its services after detecting suspicious activity on its servers. The decision to…
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs This story has been flagged as significant cybersecurity news. For full details, see the original source…
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution – Patch ASAP
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution – Patch ASAP This story has been flagged as significant cybersecurity news. For full details, see the original source linked…
Meta AI model hacked a company during misconfigured cyber test
Meta AI model hacked a company during misconfigured cyber test This story has been flagged as significant cybersecurity news. For full details, see the original source linked above. Why This…
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it This story has been flagged as significant cybersecurity news. For full details, see the original source…
AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day This story has been flagged as significant cybersecurity news. For full details, see the original source linked above. Why…
Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails
Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails This story has been flagged as significant cybersecurity news. For full details, see the original source linked above.…