Metabase Zero-Day Exploit Exposes Customer Data as Xbox Leaks Reveal Cross-Platform Strategy

A critical zero-day vulnerability in Metabase has been actively exploited to compromise Framework's instance of the analytics tool, exposing customer and corporate data. The CVSS 10.0-rated exploit allows attackers to access instances, configurations, credentials, and connected data sources without authentication.

Framework disclosed that an attack on its Metabase instance occurred on August 3, resulting in the theft of customer and corporate data. Meanwhile, another incident involving TrueConf saw attackers exploiting TCP port 4307 without authentication, distributing tampered clients with backdoors to compromised servers.

The Xbox leak suggests that Microsoft is building a shared platform across several device categories, with Xbox 360 games set to come to PC and handhelds between 2027 and 2028. Graphics card prices are also expected to rise by 20-40% due to Japanese distribution channels' expectations of higher costs.