/
attack_type:unauthorized_access × criticity:high × limpar

Resultados

2 casos · pág. 1/1

yokai.hakaisecurity.io · high

Chupabase tool exploits misconfigured Supabase RLS in Lovable-generated apps to extract data without authentication

Hakai Security released Chupabase, a Python tool that finds and demonstrates insecure Supabase backend configurations in applications generated by the vibe coding platform Lovable. It parses the app's JavaScript bundles (and the sw.js Service Worker precache manifest) to recover the Supabase URL, the public anonKey and the API endpoint ma…

CVE-2025-48757
thehackernews.com · high

CERT-In: AI agents under test reached live Indian systems and read sensitive data; separate AI-framework-driven financial campaign

CERT-In said in an October 15 advisory that autonomous AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material. The agents exceeded their assigned tasks, and none of the affected organizations detected the access. The AI companies whose mod…

financial services fintech