Terug naar Nieuws
BeveiligingAI Understanding-briefing

Uit UpGuard-onderzoek blijkt dat 16.326 Supabase-databases leesbare tabellen op het openbare internet beschikbaar stellen

Uit het onderzoek van UpGuard bleek dat 16.326 Supabase-databases leesbare tabellen openbaar maakten op het openbare web, een aanzienlijk beveiligingsprobleem.

4 min readRead the linked source
Source-provided image accompanying UpGuard study finds 16,326 Supabase databases exposing readable tables to the public web
BronreferentieBron opgenomen
Uitgever
unite.ai
Bronlink
unite.aihttps://www.unite.ai/upguard-study-finds-16-326-supabase-databases-exposing-readable-tables/
Brontype
Gekoppelde bron: de status van de primaire bron is niet vastgesteld.
ContextBegrijp dit in 60 seconden

Begin hier

Test jezelfWat is AI? Quiz

Wat is er gebeurd

UpGuard published a study on September 25, 2026, identifying 16,326 databases hosted on the Supabase platform that expose readable tables to the public web. The study was written by Greg Pollock, UpGuard's Director of Research and Insights. The researchers found that more than half of the exposed databases showed indicators of personally identifiable information, a smaller percentage included passwords or authentication tokens, and a very small number contained plausible credit card data.

The study identified 16,326 databases hosted on Supabase that expose readable tables to the public web. More than half of the exposed databases showed indicators of personally identifiable information. A smaller percentage included passwords or authentication tokens. A very small number contained plausible credit card data. The researchers found that sites using Supabase can be fingerprinted by looking for Supabase key names and database addresses in public JavaScript files.

Brongegevens: unite.ai ↗

Waarom het ertoe doet

The study highlights the importance of proper security configuration in preventing data leaks. Supabase has become a core component of web applications built through AI-assisted 'vibe coding.' The researchers found that sites using Supabase can be fingerprinted by looking for Supabase key names and database addresses in public JavaScript files. The study also notes that data leaks are the multiplicative product of a technology's ease of misconfiguration and the size of its user base.

The study highlights the importance of proper security configuration in preventing data leaks. Supabase has become a core component of web applications built through AI-assisted 'vibe coding.' The researchers found that data leaks are the multiplicative product of a technology's ease of misconfiguration and the size of its user base. The study notes that data leaks are not limited to one region, but are happening worldwide. The severity of data leaks is not uniform, with Europe's data protection laws driving better practices and developing regions having more data leaks.

Interactive Mechanism

Interactief mechanisme: hoe het eigenlijk werkt

Ontdek interactief de onderliggende technologie achter deze ontwikkeling.

System Requirements:
Best ArchitecturePure RAGRecommended pattern
Hallucination RiskVery LowGrounding efficacy
Update Cost$0 (Vector sync)Ongoing maintenance
Core takeaway: Fine-tuning teaches models how to speak (form, style, syntax); RAG teaches models what to say (verifiable facts). Never use fine-tuning alone for factual memory.
Interactieve conceptcheck+10 Points
What is AI? Quiz

Which description best fits "narrow AI", the kind of AI in use today?

Wat je nu moet bekijken

The study's findings suggest that proper security configuration is crucial in preventing data leaks. Developers and users should be aware of the potential risks associated with misconfigured databases and take steps to secure their data.

Developers and users should be aware of the potential risks associated with misconfigured databases. Proper security configuration is crucial in preventing data leaks. The study's findings suggest that data leaks are a significant concern in the tech industry. The study notes that data leaks can have severe consequences, including financial losses and reputational damage. The study's recommendations for preventing data leaks include implementing row-level security and using credentials correctly.

Gerelateerde gidsen en quizzen

Wat is AI?AI-ethiekAI-agentenTest wat je weet: probeer een gratis AI-quizZoek een AI-term op in onze woordenlijstVolg de AI-regelgevingstracker
Vond je dit nuttig?