Chisato · · 6 min read Metabase Zero-Day (CVSS 10.0): SQL Injection Explained
A CVSS 10.0 SQL injection zero-day in Metabase was exploited in the wild to steal database credentials. Affected versions, the fix, and what it means.
Topic
8 posts tagged “Data Breach”.
Chisato · · 6 min read A CVSS 10.0 SQL injection zero-day in Metabase was exploited in the wild to steal database credentials. Affected versions, the fix, and what it means.
Chisato · · 6 min read Biotech giant Amgen disclosed a material breach in an SEC filing: attackers exfiltrated patient health data and proprietary files from third-party cloud.
Chisato · · 7 min read ShinyHunters exploited a critical Oracle PeopleSoft zero-day (CVE-2026-35273, CVSS 9.8) to breach 100+ organizations. What happened and how to respond.
Chisato · · 5 min read EY disclosed a breach after attackers accessed a third-party IT support platform and downloaded client tax documents. What happened, what leaked, and what to do.
Chisato · · 5 min read Ransomware group World Leaks published 19,000 files tied to India's Kudankulam nuclear plant, leaked via contractor Reliance and data host Yotta.
Chisato · · 6 min read ShinyHunters leaked data on 2.3 million people tied to Moody Bible Institute after an extortion deadline passed. What was stolen, and what victims should do.
Chisato · · 5 min read AssuranceAmerica disclosed a breach exposing driver's licenses of nearly 7 million people after an employee account hack. What leaked and what to do.
Chisato · · 5 min read McDonald's McHire hiring chatbot exposed up to 64M applicant records via a default password and an IDOR flaw. What happened, what leaked, and the lessons.