Skip to content

Search results for «Database Security»

  1. Supabase Security Review: 16,000 Databases Found Publicly Readable

    Research from September 2026 found over 16,000 Supabase Postgres databases exposing tables publicly, mostly due to missing Row Level Security policies.

    3 min read

  2. Supabase Security Review: Misconfigured Databases Expose 16,000+ Records

    Analysis of 16,326 Supabase databases with public tables containing PII and authentication tokens, traced to customer misconfigurations rather than a platform breach.

    4 min read

  3. DodoPayments review: Security After Metabase SQL Injection Incident

    Dodo Payments disclosed unauthorized access to its self-hosted Metabase analytics system in August 2026. The incident involved CVE-2026-72898 but left payment processing unaffected.

    3 min read

  4. Railway Security Review: Environment Variables Exposure After October 2026 Incident

    Railway detected unauthorized access to encrypted environment variables in October 2026. The platform restored operations after remediation but requires users to rotate secrets.

    3 min read

  5. Toho Holdings breach: EnTouch remote detailing data exposed after ransomware access

    Toho Holdings confirmed unauthorized access to its EnTouch subsidiary database in mid-October 2026, with claims of data exfiltration by a ransomware group.

    3 min read

  6. Burger King Japan Data Breach Exposes 11 Million Customer Records

    Unauthorized access to Burger King Japan’s app server exposed 11.18 million member records in October 2026. The incident highlights ongoing security challenges for Japanese service operators.

    3 min read

  7. Zeabur Security Review: Environment Variable Exposure in Two 2026 Breaches

    Two security incidents in 2026 exposed millions of environment variables on Zeabur before the platform announced its full shutdown by December 31.

    3 min read

  8. LiteLLM Security Review: Supply Chain Compromise Through Malicious Package

    A malicious LiteLLM release on October 21, 2026, exposed users to credential theft via infected PyPI packages and Docker images. Organizations must audit deployments and rotate keys immediately.

    3 min read

  9. Railway Security Review: Assessing the October 2026 Environment Variable Breach and Credential Risks

    Railway disclosed a security incident on October 21, 2026, involving possible access to encrypted environment variables containing customer secrets. The company urged all users to rotate keys immediately.

    3 min read

  10. FDCTech Review: No Evidence Supports Claims of 500,000 Record Breach

    No verified reports confirm a data breach at FDCTech. SEC documents show accounting issues but no cybersecurity incidents.

    2 min read

  11. PingCAP Review: TiDB Cloud Breach Exposes 10.6 TB of Data

    PingCAP's TiDB Cloud suffered a breach with 10.6 TB of data claimed stolen in October 2026. Official statements clarify what was and was not accessed.

    3 min read

  12. AI Agents Security Review: Autonomous Tools Targeting Retailers and Developer Environments

    Autonomous AI agents enabled financially motivated actors to breach over 100 companies in 2026 campaigns against retailers and developer platforms, often at costs under $50 per target.

    3 min read