> TritonInfoSec News
Home / Sep 30, 2026 / Story
0
#10 BleepingComputer general September 28, 2026 at 18:50 UTC

Misconfigured Supabase apps expose data in over 16,000 databases

By Bill Toulas

AI Summary

Researchers discovered more than 16,000 misconfigured Supabase database instances exposing publicly readable tables containing PII, plaintext passwords, and authentication tokens. The widespread misconfiguration stems from developers leaving Supabase's row-level security (RLS) disabled or improperly configured, effectively making sensitive backend data accessible without authentication. Organizations using Supabase for application backends should immediately audit RLS policies and restrict public schema access.

Read full article → https://www.bleepingcomputer.com/news/security/mis…

Relevance score: 73.0/100

# More from September 30

  1. 1
    Hackers exploit Citrix NetScaler zero-day to deploy web shells BleepingComputer
  2. 2
    Apple patches CoreGraphics zero-day flaw exploited in attacks BleepingComputer
  3. 3
    New Spectre v2 attack variant leaks Linux root password hash in minutes BleepingComputer
  4. 4
    French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks The Hacker News
  5. 5
    Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor The Hacker News
  6. 6
    FBI tells ShinyHunters members to turn themselves in after recent arrest BleepingComputer
  7. 7
    Pentagon Personnel Agency Data Breach Impacts 3 Million People SecurityWeek
  8. 8
    JadePuffer agentic AI attacks target Azure, destroy cloud resources BleepingComputer
  9. 9
    Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials The Hacker News