Huntress spotted a white whale - a malicious toolkit stored as a database object.

A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...