#Third-Party Risk

Framework and Trezor's Shipping Partner Both Got Breached Through Metabase

Two unrelated companies disclosed breaches in the same week, both tracing back to a vulnerability in Metabase, the business intelligence tool their vendors used. Here's what happened, how it lines up with the CVE we covered days earlier, and what to actually check.