Software

Metabase SQLi zero-day exploited in customer data-theft attacks

Software /

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. Metabase disclosed the attacks on Thursday, warning that its Metabase Cloud SaaS platform was compromised through a previously unknown vulnerability affecting versions 1.58 and above. The company warns that self-hosted

Metabase SQLi zero-day exploited in customer data-theft attacks Read More »

Chrome on Android is falling behind — here are 5 features it needs now

Software, Technology /

Affiliate links on Android Authority may earn us a commission. Learn more. Extensions, proper privacy controls, customization, and background playback — competing browsers have been checking these boxes for years. The list of things Chrome still hasn’t gotten around to is longer than it should be, and it’s high time Google closed the gap. If

Chrome on Android is falling behind — here are 5 features it needs now Read More »

How AI-powered phishing killed blocklists for good

Software /

Blocklists were already losing ground before AI entered the picture. Phishing domains have been getting shorter-lived for years, campaigns have been burning infrastructure faster, and the gap between blocklists and attacker campaigns keeps getting wider. AI just finished the job. Attackers are using AI to generate phishing pages from screenshots in minutes, spin up and

How AI-powered phishing killed blocklists for good Read More »

Google Blogger locks hundreds of blogs in malware false positive

Software, Technology /

Google has locked hundreds of Blogger websites after a false positive claimed they violated its “Malware and Similar Malicious Content” policy, with some sites actually deleted from the platform. The issue began on August 4, and it appears to affect many legitimate blogs that do not host malware or have malicious scripts. As seen by

Google Blogger locks hundreds of blogs in malware false positive Read More »

COLDCARD security audit phishing attack installs remote access tool

Software /

A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 million Bitcoin theft to trick users into installing ScreenConnect remote access software. Proofpoint, which discovered the campaign, says it uses emails impersonating COLDCARD that claim a security audit is underway across its hardware cold storage wallet devices. The phishing

COLDCARD security audit phishing attack installs remote access tool Read More »

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

Software /

The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilities in IBM Langflow, N-central, and Apache Tomcat, all actively exploited. ​Tracked as CVE-2026-9198, the security issue in IBM’s Langflow visual framework for building AI agents is the most severe, with a critical rating of 9.8 out of 10. It

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws Read More »

Hackers run khunt post-exploitation toolkit from Oracle database

Software /

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database that was used to breach a corporate network. The attack was discovered by Huntress on July 27, 2026, after its security platform detected credential theft on a server hosting an Oracle database server. Apache access logs showed that the

Hackers run khunt post-exploitation toolkit from Oracle database Read More »

Canadian pleads guilty to Snowflake cloud data-theft attacks

Software /

A Canadian man pleaded guilty today to his role in accessing company accounts at cloud storage provider Snowflake and stealing data from at least 165 organizations in a scheme to extort millions of dollars from victims. ​26-year-old Connor Riley Moucka, also known as Alexander Moucka and Waifu, was arrested on October 30, 2024, for stealing

Canadian pleads guilty to Snowflake cloud data-theft attacks Read More »

Ransom Cartel ransomware creator sentenced to 16 years in prison

Software /

Maksim Silnikau, the creator and administrator of the Ransom Cartel ransomware operation, was sentenced to 16 years in prison for his role in ransomware attacks against at least 18 companies worldwide. The U.S. Department of Justice announced today that the 40-year-old Belarusian national was sentenced for conspiracy to commit offenses against the United States, conspiracy

Ransom Cartel ransomware creator sentenced to 16 years in prison Read More »

AMD made over 8 times as much revenue on data centers as it did gaming last quarter

Software, Technology /

Nvidia hasn’t been just a gaming-focussed company for a fair few years now, dining well off of the booming AI industry. AMD, one of its main rivals, is much the same, with the company feasting on the data centre segment in particular this past quarter. In total, AMD reported record-breaking revenue of $11.5 billion in

AMD made over 8 times as much revenue on data centers as it did gaming last quarter Read More »