PostgreSQL SQL injection flaw (CVE-2025-1094) exploited alongside BeyondTrust zero-day, enabling arbitrary code execution.

Rapid7's vulnerability research team says attackers exploited a PostgreSQL security flaw as a zero-day to breach the network ...

The vulnerability in the PostgreSQL interactive tool (psql) can lead to arbitrary code execution (ACE) and there is also a ...

Zimbra has patched CVE-2025-25064, a critical SQL injection flaw (CVSS 9.8), and other security bugs. Update now to protect ...

Rapid7 researchers believe the BeyondTrust Remote Support attacks from December also exploited a zero-day flaw in PostgreSQL.

Tech fans who flocked to try out DeepSeek will want to think twice about what the app is doing – just days after ...

Rapid7 finds a new zero-day vulnerability in PostgreSQL and links it to chain of attacks against a BeyondTrust Remote Support ...

Researchers discovered two active exploits of zero-day vulnerabilities in warehouse management software platform VeraCore.

Another trend is of targeting perimeter-based products with vulnerability exploitation. The National Cyber Security Centre ...

Security researchers found DeepSeek AI has weak encryption, SQL injection flaws and sends user data to Chinese state-linked ...