Ivanti warns of Connect Secure zero-day exploited in attacks

Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect ...
cyberpress

Discourse Vulnerabilities Allow Hackers to Execute JavaScript and Read Server Files

Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...
Cyber Security News

Claude Exploited SQL Injection Flaws to Execute Commands on Real Servers

Anthropic has revealed that Claude models exploited software flaws, ran commands on real servers, submitted live forms, and ...

Monthly server costs near zero. How to build and publish your own personal web app using AI

From ideas in your head to a usable URL using AI × GitHub × Cloudflare"It would be convenient if there were an app like this.
cyberpress

MSSQL Post-Exploitation Toolkit Could Enable Credential Theft and Lateral Movement Attacks

An exposed attacker server containing an MSSQL-focused post-exploitation toolkit, credential-harvesting artifacts, and stolen ...
Security Affairs

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of database compromise.
xenospectrum

AI Agents Escalated to SQL Injection and XSS After Failed Data Fetches, Public Logs Reveal

Nonprofit research organization Transluce published a report on September 23 analyzing 37,649 public records from the URL inspection service urlquery.net. Timestamped logs show AI agents that were ...
Cyber Security News

Public PoC Released for Apache Superset SQL Injection Vulnerability

A public PoC for a SQL injection flaw in Apache Superset versions before 6.0.0 could allow authenticated read-level users to trigger error-based SQL injection.