SQL injection

ShinyHunters claims Metabase breach after zero-day hit

Business intelligence platform Metabase disclosed on August 6 that attackers exploited a zero-day SQL injection vulnerability to breach Metabase Cloud, gaining raw access to application databases and potentially exposing stored credentials, API keys, and connected data warehouse contents. The flaw,…