tag: Metabase · 1 items
- Engineer — Plan: Metabase is widely self-hosted as an internal analytics/BI tool; audit your own Metabase instance for misconfigurations or unpatched CVEs that may match the attack vector used here, and verify network exposure of the service.
- SOC/IR — Skip
- Leader — Learn: A 1M+ record breach via an internal BI tool (Metabase) at an ed-tech vendor illustrates third-party analytics platform risk, but requires no immediate leadership action for organizations not using Mathspace.