Metabase SQLi zero-day exploited in customer data-theft attacks

BleepingComputer security feed covering active exploitation of a critical Metabase SQL injection zero-day, major data breaches, social-engineering and business-email-compromise attacks, ransomware and extortion activity, macOS infostealer campaigns, SharePoint compromise, speculative-execution research, and SQL injection-enabled post-exploitation. The most urgent item is exploitation of Metabase instances for customer data theft, alongside ongoing attacks against government, financial, healthcare, and enterprise organizations.