A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

On this episode of Masters of Data, we revisit the predictions Adam White, Zoe Hawkins, and David Girvin made at the end of last year, checking our own scorecard halfway through 2026. The hits: agents ...

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web ...

An unpatched SQL injection vulnerability in the Ghost content management system has been weaponized in an active, large-scale cyberattack that has compromised more than 700 websites worldwide — ...

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. The campaign was ...

In 2026, entry-level and transition roles often expect more than passive course completion. Employers want to see that you can write queries that answer business questions, work with browser logic, ...

The error message indicates that OneNote cannot connect to the server. This usually happens when the internet connection is unstable. Check your network connection ...

SQL Server backups cannot be restored to older versions directly. Use Export and Import Data-Tier Application for cross-version database migration. Reconfigure permissions, logins, and connection ...

Listening to music via Bluetooth isn’t as simple as plugging in a pair of headphones and playing audio from your device. Yet Bluetooth headphones and earbuds offer a wireless connection that’s ...