Education on CuraSechttps://curasec.metacog.co.kr/tags/education/Recent content in Education on CuraSecHugoen-usMon, 07 Sep 2026 16:27:04 +0000Mathspace breach via Metabase exposes 1M+ student and staff recordshttps://curasec.metacog.co.kr/insights/2026-09-07-mathspace-discloses-data-breach-affecting-over-1-million-peo/Mon, 07 Sep 2026 16:27:04 +0000https://curasec.metacog.co.kr/insights/2026-09-07-mathspace-discloses-data-breach-affecting-over-1-million-peo/<ul> <li><strong>Engineer — Plan:</strong> Metabase is widely self-hosted as an internal analytics/BI tool; audit your own Metabase instance for misconfigurations or unpatched CVEs that may match the attack vector used here, and verify network exposure of the service.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Learn:</strong> A 1M+ record breach via an internal BI tool (Metabase) at an ed-tech vendor illustrates third-party analytics platform risk, but requires no immediate leadership action for organizations not using Mathspace.</li> </ul>