Metabase

Trezor Data Breach Exposes 80,689 Customers to Phishing Risks

Framework Laptop Maker Faces Data Breach via Metabase Zero-Day Exploit

ZaWoo Ransomware Group Targets Zenith Technology in Data Breach

CenterPoint Energy Confirms Data Breach Affecting Millions of Customers

London Property Manager Breach Exposes Sensitive Customer Data

LexisNexis Services Taken Offline Due to Suspicious Server Activity

Mathspace Data Breach Exposes Over 1 Million Users' Information

Data Breach Exposes Personal Information of 300 Scottish Prosecutors Staff

Trezor customers hit with phishing calls and letters after shipping

Chrome/Edge backdoors, Magento zero-day, Microsoft 365 phishing at scale

Trezor's Supply Chain Cracked Through ShipMonk's Unpatched Metabase

Trezor’s Supply Chain Cracked Through ShipMonk’s Unpatched Metabase: 67,000 Crypto Customers Exposed

Savoy said

Mathspace discloses data breach affecting over 1 million people

Trezor data breach impact now reaches 81,000 customers

Mathspace Breach Impacts More Than 1 Million Users in Australia, NZ

Breached! Tutoring platform Mathspace says 1m

Trezor ShipMonk Breach Exposes 67,000 U.S. Customer Records via Metabase Zero

14000 Customers Exposed in ShipMonk Metabase SQL Injection Incident

Trezor discloses data breach affecting nearly 14000 customers after shipping partner hack

Scottish prosecutors cast eye over leaky supplier after staff data exposed

Trezor Says ShipMonk Breach Exposed Order Data for 13689 Customers

14,000 Trezor users put on phishing alert after data breach

Risky Bulletin: Russian hackers adopt the fake job interview tactics

CVE-2026-72899: Metabase Unauthenticated SQL Injection 1dayexploit / 15h The vulnerability affects versions 0.58.0 through 0.63.4 and is caused by insufficient validation of parameter values in the public sharing endpoint. An attacker needs only the public link UUID (which is part of the shared URL by design) to execute arbitrary queries against the Metabase application database as a superuser.

CVE-2026-72899 - Exploits & Severity

LexisNexis pulls three services offline after suspicious server activity

Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data

Metabase SQLi zero-day exploited in customer data

Framework Notifies 'All Customers' of a Data Breach Via Compromised Metabase BI Service

Upgradable Laptop Maker Framework Suffers Breach Affecting All Customers

Computer maker Framework notifies ‘all customers’ of a data breach

Metabase zero-day: Data leak at laptop manufacturer Framework

Security update available for Metabase