ThreatVectr
Tag

#Metabase

4 stories taggedMetabase.

A phishing email in an inbox with a spoofed Trezor security alert subject line, security warning indicators, and behind it visible records of a breached third-p
Breaches

Trezor's email system hijacked to send fake 'security alert' phishing to customers

Criminals used a breached third-party email provider to send phishing from a real Trezor address, weeks after a separate shipping-partner breach ballooned to 81,000 customers.

4 min read
A classroom setting with empty student desks and computers, a digital lock icon broken open on one screen, file folders and educational materials scattered, rep
Breaches

Mathspace breach exposes data on more than 1 million students, parents and staff

Attackers exploited a flaw in the maths platform's internal reporting tool, part of a wider campaign tied to the ShinyHunters extortion crew.

4 min read
A weekly security briefing visualization showing multiple simultaneous threats: Metabase interface with zero-day warning, plugin ecosystem with poison indicator
Threat Intelligence

Weekly Recap: A Metabase Zero-Day, Poisoned AI Plugins, and Routers Left Wide Open

Old bugs are back, supply chains are getting stranger, and the shortest exploit paths keep being the ones nobody guarded.

4 min read
A business analytics dashboard on a computer screen being overlaid with shadowy hands reaching through the monitor to grab data files and user records
Vulnerabilities

Metabase Zero-Day Turns Dashboards Into Data Heists at Framework and Tally

A critical flaw in the popular analytics tool let attackers walk in as admin. Customer names, emails and password hashes were taken before anyone knew the hole existed.

4 min read
© 2026 Threat Vectr