GoKawiil
Tech News
Security firm UpGuard reports that copyright takedown requests referencing OnlyFans and other adult content have been linked to compromised university and government websites. Researcher Greg Pollock says attackers appear to be using these breached sites to manipulate search engine results.
Cyber risk firm UpGuard scanned around 300,000 domains using Supabase and found more than 16,000 databases with misconfigured access controls exposing readable tables. Over half contained personally identifiable information, with smaller subsets exposing plaintext passwords, authentication tokens, and in some cases credit card data. Specific examples cited include a US valet service exposing 100,000+ customer records, a Canadian immigration service leaking 884 plaintext passwords, and an African government consulate exposing 25,000 records.
Cybersecurity firm UpGuard identified roughly 16,000 Supabase-hosted databases that were publicly accessible, exposing personal information including names, addresses, phone numbers, passwords and some authentication tokens. Supabase, a backend platform valued at $10 billion this year, has seen surging use among developers building AI 'vibe-coded' apps, and has previously faced criticism over how customers configure database security.