Search: “sql”

558 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 771 Ransomware 315 Exploit / PoC 257 Data breach 199 Malware 165 Industry 94 Policy & legal 64 Threat actor 62 AI tools & infra 38 Advisory 29 Phishing & fraud 21 Tools 20 AI safety & security 19 Research 14

SeverityAll critical 970 high 558 medium 311 low 169 info 80

GeoServer Zero-Day Is Already Being Probed. That’s the Problem

Unpatched GeoServer zero-day enabling SQL injection and possible RCE is being actively probed across exposed systems.

A zero-day in GeoServer's jsonArrayContains functionality allows unauthorized SQL injection and, in some configurations, remote code execution. Disclosed on August 12, 2026 without a CVE ID, it drew hundreds of exploitation probes from watchTowr within hours. No patch is available yet; GeoServer was previously mass-exploited via CVE-2024-36401.

Security AffairsAug 15, 07:18 UTC · Aug 15, 2026Exploit / PoC in the wildCVE-2024-36401

Hackers Exploit Job Boards, Stealing Millions of Resumes and Personal Data

The Hacker NewsFeb 7, 04:46 UTC · Feb 7, 2024Data breach

Threat Report: High Tech Industry targeted the most with 46% of attack traffic tagged by NLX

The Hacker NewsSep 29, 01:42 UTC · Sep 29, 2023Ransomware

VMware fixed SD-WAN flaws that could allow hackers to target enterprises

Security AffairsNov 23, 12:08 UTC · Nov 23, 2020Vulnerability CVE-2020-3984 CVE-2020-3985 CVE-2020-4000+3 CVEs

Vulnerability Spotlight: Two vulnerabilities in Epignosis eFront

Cisco TalosSep 3, 16:38 UTC · Sep 3, 2019Vulnerability in the wildCVE-2019-5069 CVE-2019-5070

Ubuntu online forums hacked again by exploiting a known SQLi

Security AffairsJul 7, 13:15 UTC · Jul 7, 2019Data breach

FIN7 is back with a previously unseen SQLRat malware

Security AffairsMar 22, 08:36 UTC · Mar 22, 2019Malware

Ancient Mac Site Harbors Botnet that Exploits IE Vulnerability

Cisco TalosDec 15, 10:24 UTC · Dec 15, 2014Vulnerability CVE-2014-6332

Cisco security advisory (AV26-921)

Canadian Cyber Centre warns actively exploited Cisco Secure Email Gateway SQL injection CVE-2026-76461 was added to CISA's KEV database.

The Canadian Centre for Cyber Security advisory AV26-921 (September 14, 2026) covers a SQL injection vulnerability in Cisco Secure Email Gateway (AsyncOS) and Secure Email and Web Manager. Affected versions include AsyncOS/Secure Email Gateway prior to 15.5.5-014, 16.0.4-302, and 16.5.0-780, and Secure Email and Web Manager prior to 15.5.5-006 and 16.5.0-429. Cisco stated CVE-2026-76461 is being actively exploited, and CISA added it to the Known Exploited Vulnerabilities database the same day. Users and administrators are urged to apply updates as they become available.

Canadian Centre for Cyber Securityupdated 13:57 UTC · 2h agofirst Sep 14, 19:23 UTC · 1d agoAdvisory in the wild 17 sources CVE-2026-76461

Mathspace breach exposes data on over a million students and parents

Mathspace confirmed attackers exploited an unpatched Metabase SQL injection flaw to steal personal data of 1,079,819 students, parents, and staff in Australia and New Zealand.

Attackers accessed Mathspace's self-hosted Metabase reporting system without legitimate login, with unauthorized access dating back to 10 August 2026 and data downloaded on 27 August. Exposed data includes names, usernames, email addresses, country, and account metadata; no passwords, academic records, SSO tokens, or API credentials were taken. Framework, Tally, and Kilo Code disclosed similar breaches via the same Metabase SQL injection flaw in August 2026.

Help Net SecuritySep 8, 08:45 UTC · 8d agoData breach in the wild

Off the Hook: Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586

Horizon3 disclosed CVE-2026-9586, an unauthenticated SQL injection in Sangoma Switchvox leading to RCE, now under active exploitation in the wild.

Horizon3.ai attack researchers discovered CVE-2026-9586, an unauthenticated SQL injection vulnerability in Sangoma's Switchvox VoIP appliance that can escalate to remote code execution. The researchers observed active exploitation of the flaw in the wild. A disclosure write-up was published alongside their findings, and defenders should treat internet-exposed Switchvox instances as at risk.