网络安全公司UpGuard发现，托管在Supabase开发平台上的约16,000个数据库将敏感个人数据暴露在公共网络上。
UpGuard Research Reveals Thousands of Supabase Databases Exposing Sensitive User Data Cybersecurity firm UpGuard discovered approximately 16,000 databases hosted on the Supabase development platform exposing sensitive personal data to the public web. The exposed data includes names, addresses, phone numbers, and passwords, affecting various projects including a U.S. valet service and an African government consulate in France. The research highlights the risks of 'vibe-coding' and AI-generated apps, where developers may misconfigure security settings. Supabase CISO Bil Harmer stated that the company's projects are 'secure by default' and that security is a shared responsibility between the platform and its customers.
泄露的数据包括姓名、地址、电话号码和密码，影响多个项目，包括美国的一家代客泊车服务和法国的一家非洲政府领事馆。
UpGuard Research Reveals Thousands of Supabase Databases Exposing Sensitive User Data Cybersecurity firm UpGuard discovered approximately 16,000 databases hosted on the Supabase development platform exposing sensitive personal data to the public web. The exposed data includes names, addresses, phone numbers, and passwords, affecting various projects including a U.S. valet service and an African government consulate in France. The research highlights the risks of 'vibe-coding' and AI-generated apps, where developers may misconfigure security settings. Supabase CISO Bil Harmer stated that the company's projects are 'secure by default' and that security is a shared responsibility between the platform and its customers.
该研究强调了“氛围编程”（vibe-coding）和AI生成应用的风险，开发人员可能错误配置安全设置。
UpGuard Research Reveals Thousands of Supabase Databases Exposing Sensitive User Data Cybersecurity firm UpGuard discovered approximately 16,000 databases hosted on the Supabase development platform exposing sensitive personal data to the public web. The exposed data includes names, addresses, phone numbers, and passwords, affecting various projects including a U.S. valet service and an African government consulate in France. The research highlights the risks of 'vibe-coding' and AI-generated apps, where developers may misconfigure security settings. Supabase CISO Bil Harmer stated that the company's projects are 'secure by default' and that security is a shared responsibility between the platform and its customers.
Supabase首席信息安全官Bil Harmer表示，公司的项目“默认安全”，安全是平台及其客户的共同责任。
UpGuard Research Reveals Thousands of Supabase Databases Exposing Sensitive User Data Cybersecurity firm UpGuard discovered approximately 16,000 databases hosted on the Supabase development platform exposing sensitive personal data to the public web. The exposed data includes names, addresses, phone numbers, and passwords, affecting various projects including a U.S. valet service and an African government consulate in France. The research highlights the risks of 'vibe-coding' and AI-generated apps, where developers may misconfigure security settings. Supabase CISO Bil Harmer stated that the company's projects are 'secure by default' and that security is a shared responsibility between the platform and its customers.