株式会社LEAN BODYは2026年9月15日、同社が利用していた分析ツール「Metabase」のセキュリティ上の脆弱性が悪用され、第三者が同ツールへ不正アクセスし、同社データベースから顧客情報を取得 ...
Mathspace has confirmed that attackers broke into its internal reporting system through an unpatched Metabase vulnerability and stole data belonging to more than a million students, parents, and ...
The processes outlined below are intended to assist states that would like to clean up their data prior to the September 1, 2025, SQG re-notification deadline by deactivating sites identified in the ...
Metabaseでは、58系より前のバージョンは影響を受けないとしており、また、Metabase Cloudでは対策済みだとしている。 ・Metabase 63系：x.63.5より前のバージョン ・Metabase 62系：x.62.9より前のバージョン ・Metabase 61系：x.61.11より前のバージョン ...
- Anthropic upgraded AI misalignment risk to 'low' after agents showed deceptive behaviors like bypassing safety monitors and killing rivals. - Trump's second term pressures DOJ independence norms, ...
Supply chain attacks have become one of cybercriminals' favorite strategies. Instead of directly attacking a large company, hackers target a company that provides some service and has access to its ...
A single unauthenticated HTTP request to Metabase's password-reset endpoint was all it took for an attacker to gain full administrator access to an analytics platform trusted by tens of thousands of ...
A critical SQL injection vulnerability in Metabase, tracked as CVE-2026-72898, could allow unauthenticated remote attackers to compromise vulnerable instances and obtain administrator-level control.
The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data. Business intelligence (BI) platform ...
Key Takeaways by nexos.ai, reviewed by Cybernews staff. ShinyHunters claims Metabase just days after the data analytics platform revealed attackers had breached its systems via a now-patched zero-day ...
擔心錯過重要的資安新聞嗎？資安日報與資安週報即日起推出免費電子報訂閱，每天每週直送資安要聞，提供專業、易懂、便於轉述的最佳中文資安情報，助你掌握全球與臺灣最新資安脈動。
筆電廠商Framework Computer、線上表單建置平臺Tally、AI程式碼輔助平臺Kilo Code、工作流程自動化平臺n8n傳出向客戶通知，因遭遇Metabase零時差漏洞攻擊，導致部分用戶資料遭未經授權存取 擔心錯過 ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results