Japan cyber incident reports rose 48% in Q3 2026
Insikt Group counted 918 reports, up from 621, alongside multi-million-record breaches and an IDCFrontier ransomware outage.
78
Product
Metabase
- Mentions · 7d0
- Mentions · 30d4
- All mentions15
- First seenAug 12, 2026
- Last mentioned9d ago
Timeline
15 articles · newest firstJapan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
JPCERT/CC warns of a surge in Japanese web data leaks via mobile API abuse and Metabase SQL injection.
88
Discord Security Bot Double Counter Hacked, Exposing Data of Millions of Users
Double Counter’s Discord bot breach exposed identifiers, IPs, and emails tied to tens of millions of accounts.
83
Discord Users’ Data Exposed in Security Bot Double Counter Security Breach
A Double Counter Discord bot breach exposed tens of millions of IDs and IPs and about one million emails.
82
Trezor: 347,000 users targeted in phishing attacks after Brevo breach
Trezor reported phishing after the Brevo breach targeted 347,000 newsletter subscribers, with 2,500 users clicking before the domain was taken down.
65
Mathspace Data Breach Exposes Over 1 Million People
Mathspace breach exposed data of 1,079,819 Australian and New Zealand users via exploited Metabase zero-day CVE-2026-72898; ShinyHunters claimed responsibility.
68
Mathspace breach exposes data on over a million students and parents
Mathspace confirmed attackers exploited an unpatched Metabase SQL injection flaw to steal personal data of 1,079,819 students, parents, and staff in Australia and New Zealand.
72
August 2026 CVE Landscape
Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.
68
Mathspace discloses data breach affecting over 1 million people
Mathspace disclosed a Metabase breach exposing data of 1,079,819 students, parents, and staff in Australia and New Zealand.
78
Trezor data breach impact now reaches 81,000 customers
Trezor's ShipMonk breach now affects 81,000 customers, adding 67,000 US customers after Metabase exploitation by ShinyHunters-linked attackers.
70
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Trezor disclosed the ShipMonk breach exposed data of 67,000 additional US customers, reportedly by ShinyHunters exploiting a Metabase zero-day SQL injection, CVE-2026-72898.
72
[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
Exploit-DB published an authenticated remote code execution exploit targeting Metabase version 0.61.0.
40
U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog.
CISA adds three actively exploited flaws—Cisco ASA/FTD DoS, Windows Winsock SYSTEM-level UAF, and Metabase SQL injection—to its Known Exploited Vulnerabilities catalog.
76
Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day
Weekly digest: exploited Metabase zero-day breached Framework; Salesforce/ServiceNow portals read for 17 months; Microsoft patched 400+ flaws.
32
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase warns an actively exploited zero-day (CVE-2026-72898, CVSS 10.0) grants unauthenticated admin access; Framework, n8n, and Kilo Code disclosed data exposure.
90
Related CVEs
by mentions- CVE-2026-7289899%10.0Unauthenticated SQL Injection in Metabase Grants Admin Access
- CVE-2026-203491%8.6Unauthenticated Remote DoS in Cisco ASA/FTD SSL VPN Service
- CVE-2026-688209%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-919829%9.8Unauthenticated RCE Chain in IBM Langflow OSS 1.0.0-1.10.0
- CVE-2025-6259360%9.4Actively Exploited Browser-Based RCE in Ray AI Compute Engine
- CVE-2026-8207863%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2026-8157885%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2026-1857715%8.2Authentication Bypass and Account Takeover in N-able N-central (Incomplete Patch)
- CVE-2026-598002%9.29Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint (this route is not…
- CVE-2026-33954%5.5A flaw has been found in MaxSite CMS up to 109.1
Appears with
- Metabasevendor · 11
- ShinyHuntersthreat actor · 5
- Frameworkorganization · 4
- Trezororganization · 4
- CISAorganization · 4
- ShipMonkorganization · 3
- CISAvendor · 3
- Tallyorganization · 3
- Microsoftvendor · 3
- OVHorganization · 2
- Mathspaceorganization · 2
- Metabaseorganization · 2
- JPCERT/CCorganization · 2
- Macnicaorganization · 2
- ShipMonkvictim · 2
- Mathspacevictim · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.