Over 16,000 Supabase databases expose PII, passwords, auth tokens

By Bill Toulas · BleepingComputer · Monday, 28 September 2026 at 18:50 (2d ago) · Original article ↗

Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

Attackers have been exploiting critical Zimbra flaw to steal emails

A simple email gives the attackers the ability to remotely inject OS commands.

Ars Technica 3h ago

Security

Russian state hackers use new RedFlick technique to push malware

The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature CosmicPulse backdoor. [...]

BleepingComputer 3h ago

Security

DIVD says Zammad zero-days enabled AI-driven network breach

The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. [...]

BleepingComputer 4h ago

Over 16,000 Supabase databases expose PII, passwords, auth tokens

More Security & Privacy

Attackers have been exploiting critical Zimbra flaw to steal emails

Russian state hackers use new RedFlick technique to push malware

DIVD says Zammad zero-days enabled AI-driven network breach