Skip to content

Search results for «API Keys» Page 2

  1. Supabase Security Review: 16,000 Databases Found Publicly Readable

    Research from September 2026 found over 16,000 Supabase Postgres databases exposing tables publicly, mostly due to missing Row Level Security policies.

    3 min read

  2. LiteLLM Security Review: Supply Chain Compromise Through Malicious Package

    A malicious LiteLLM release on October 21, 2026, exposed users to credential theft via infected PyPI packages and Docker images. Organizations must audit deployments and rotate keys immediately.

    3 min read

  3. Railway Security Review: Assessing the October 2026 Environment Variable Breach and Credential Risks

    Railway disclosed a security incident on October 21, 2026, involving possible access to encrypted environment variables containing customer secrets. The company urged all users to rotate keys immediately.

    3 min read

  4. PingCAP Review: TiDB Cloud Breach Exposes 10.6 TB of Data

    PingCAP's TiDB Cloud suffered a breach with 10.6 TB of data claimed stolen in October 2026. Official statements clarify what was and was not accessed.

    3 min read

  5. OpenCode Security Review: Console Breach and Distillation Attack Risks

    OpenCode security review covers the October 2026 legacy Console breach tied to a distillation attack that exposed API keys for roughly 1.4 percent of hosted users.

    3 min read

  6. Zeabur Security Review: Assessing the 2026 Breach, Data Exposure Risks, and Service Shutdown

    The October 2026 breach at Zeabur exposed millions of environment variables and accounts, leading to the platform's planned shutdown by year end.

    3 min read

  7. Supabase Security Review: Misconfigured Databases Expose 16,000+ Records

    Analysis of 16,326 Supabase databases with public tables containing PII and authentication tokens, traced to customer misconfigurations rather than a platform breach.

    4 min read

  8. Master of Malt Security Review: BigCommerce App Key Breach Exposed Customer Data

    Master of Malt confirmed a customer data exposure in September 2026 after a compromised BigCommerce app key allowed access to names, emails, and addresses for roughly four days.

    3 min read

  9. Aoki Infostealer Targets AI Coding Assistants for Credential Theft

    Symantec identified expanded Aoki infostealer variants that harvest credentials from AI coding assistants, enabling LLMjacking and unauthorized access to linked services.

    3 min read

  10. AI Tools Security Review Shows Malware Campaigns Targeting Claude and ChatGPT Users

    Analyses from April to October 2026 recorded over 1,200 sandbox submissions tied to fake AI tool campaigns, with Claude and ChatGPT lures dominating.

    3 min read