Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Passkey attacks abuse Windows logs, Google Password Manager, and Windows Hello to bypass phishing-resistant MFA without breaking FIDO2.

A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability ...