ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “slackbot”

4 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI industry 1Malware 1Industry 1Exploit / PoC 1
SeverityAllcritical 2high 0medium 0low 1info 1

Slack can now vibe-code interactive charts and reports inside chats

Slack launched Slackforce Surfaces, letting Slackbot build interactive dashboards, reports, and microsites directly inside chat channels.

Slackforce Surfaces uses AI to gather context from conversations and connected apps such as Google Drive and Salesforce to generate shareable interactive reports, polls, dashboards, and presentations. Surfaces can be pinned to channels where colleagues can view, interact, and comment. The feature is available to all customers, including free users, with Slackbot enabled, and live data support starts in October.

The Verge · AI · 5d agoAI industry

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

Metabase warns an actively exploited zero-day (CVE-2026-72898, CVSS 10.0) grants unauthenticated admin access; Framework, n8n, and Kilo Code disclosed data exposure.

Metabase disclosed a maximum-severity SQL injection affecting versions x.58 through x.63 that lets unauthenticated attackers inject SQL via the /api/session/reset_password endpoint and gain administrator access to Metabase instances. Metabase Cloud was attacked, patches were released, and CISA added CVE-2026-72898 to the KEV catalog with a federal remediation deadline of August 14, 2026. Downstream victims include Framework (customer names, IPs, addresses, phone numbers, and emails accessed), n8n (136 customer records, five with bcrypt-hashed passwords), and Kilo Code (Slack access tokens). Wiz estimates roughly 13% of cloud environments run self-hosted Metabase, with about 2,500 instances internet-accessible.

The Hacker News · Aug 12, 2026Exploit / PoC in the wildCVE-2026-72898CVE-2023-38646