CTI · reviewed · 2026-09-29

Misconfigured Supabase apps expose data in over 16,000 databases

Full story & timeline

MITRE ATT&CK

• T1552 Unsecured Credentials Credential Access
• T1530 Data from Cloud Storage Collection

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://www.bleepingcomputer.com/news/security/misconfigured-supabase-apps-expose-data-in-over-16-000-databases/
• https://www.upguard.com/blog/everything-everywhere-systemic-data-exposure-in-supabase-apps
• https://mattpalmer.io/posts/2025/05/statement-on-CVE-2025-48757/
• https://supabase.com/blog/supabase-security-2025-retro
• https://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys