Metabase SQLi zero-day exploited in customer data-theft attacks

A BleepingComputer security-news feed covering active exploitation, data breaches, ransomware, infostealers, supply-chain and cloud compromises, social engineering, cyberattacks against critical infrastructure, and emerging hardware and AI security issues. The most urgent item reports a critical Metabase SQL injection zero-day exploited in attacks against customer instances for data theft. Other notable reports include a macOS ClickFix infostealer, SharePoint compromise affecting a government environment, a Spectre v2 bypass leaking Linux password hashes, and attacks against financial and port