News reporting focused on AI and machine learning, covering the companies behind these technologies, their real-world applications, and the ethical concerns they raise. This includes areas like generative AI (large language models, text-to-image and video), speech tech, and predictive analytics.
Metabase disclosed a critical zero-day SQL injection vulnerability (CVE-2026-72898) with a perfect CVSS score of 10, affecting versions 1.58 and up. The flaw allows attackers raw SQL access via the password reset endpoint, impacting companies like Kilo Code, Tally, Framework, n8n, and ChecklyHQ. Metabase has patched the issue and urges self-hosted users to upgrade immediately.
n8n disclosed a security incident involving unauthorized access to its internal Metabase analytics environment, affecting 136 records with names and email addresses, including five bcrypt-hashed passwords. The company notified German authorities and affected users, and recommends password resets as a precaution.