Linux SCTP flaw CVE-2026–64564 dates back to 2008 and Tencent researchers say it could escape containers and gain host root.
Get the latest international news and world events from around the world.
Metabase SQLi zero-day exploited in customer data-theft attacks
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.
Metabase disclosed the attacks on Thursday, warning that its Metabase Cloud SaaS platform was compromised through a previously unknown vulnerability affecting versions 1.58 and above. The company warns that self-hosted installations are also vulnerable.
“We recently identified that Metabase Cloud was attacked by someone utilizing an unknown (“0-day”) security vulnerability in versions 1.58 and above,” Metabase CEO Sameer Al-Sakran warned in a blog post.
Unlimited Technology Systems breach impacts 3.8 million people
Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025.
The organization submitted data breach notification samples to the authorities this year on July 1st without revealing the exact number of impacted individuals.
An entry on the breach notification portal of the U.S. Dept. of Health and Human Services now shows that a company server was breached and data of 3,803,750 people was exposed to an unauthorized party.
Real emails, hijacked payments: Two H1 2026 attack chains
Address books or allowlists reduce repeated manual entry, while first-time or changed destinations deserve a full comparison rather than a check of only the opening and closing characters.
In both campaigns, the first trust decision could look legitimate while the surrounding workflow had already been changed. Detection and verification need to cover the steps between the authenticated email, the copied value and the final action.
Gen’s H1 2026 Threat Report covers the broader picture across scams, malware, identity exposure, privacy and AI-driven attacks.
The Dark Data IIoT Opportunity Is Hiding In Files You Already Own
The dark data opportunity in iiot that most manufacturers are missing.
You’ve already collected years of logs, reports, PDFs, maintenance records, and unstructured files — but most of it sits unused.
This “dark data” represents a massive hidden opportunity for predictive maintenance, process optimization, and quality improvements — often with faster ROI than deploying more sensors.
The challenge is turning messy, unlabeled archives into usable training data for AI.
The companies winning in 2026 will combine new IIoT streams with smart extraction from the data they already own.
Full analysis: [ https://creedtec.online/the-dark-data-iiot-opportunity-is-hi…ready-own/](https://creedtec.online/the-dark-data-iiot-opportunity-is-hi…ready-own/)
#IndustrialIoT #DarkData #IIoT #SmartFactory