A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.
This week’s cybersecurity recap covers rogue AI behavior, an exploited Metabase zero-day, MCP supply-chain attacks, router backdoors, and more.