Tag: metabase
4 articles
Trezor Breach Exposes 67,000 US Customers' Data
A data breach at Trezor's shipping provider has compromised the personal info of 67,000 US customers, including names, emails, phone numbers, addresses, and order numbers. The breach, linked to a zero-day SQL injection vulnerability, has raised concerns about customer data security, but Trezor assures that its hardware wallets remain secure.
Metabase Zero-Day Exploited to Breach Framework Customer Data
A zero-day exploit in analytics provider Metabase has led to a data breach at laptop maker Framework, exposing personal customer information, and prompting a review of its data storage methods with external vendors. Metabase has since patched the bug, blocked attack endpoints, and deployed a fix across its cloud service to prevent further exploitation.
Metabase Zero-Day Exploits Grant Admin Access
A critical zero-day vulnerability in Metabase allows hackers to gain admin access and wreak havoc on your data, with a perfect 10.0 CVSS score highlighting the severity of this threat. Attackers can inject malicious SQL, steal sensitive credentials, and export data, making immediate patching a top priority.
Metabase Zero-Day Exploited in Data-Theft Attacks
Metabase Cloud was recently hit by a data-theft attack, exploiting a previously unknown security vulnerability in versions 1.58 and above, which the company has since patched and confirmed had a maximum severity rating. If you're a self-hosted customer, you'll need to update manually to protect yourself.