List of AI News about RLS
| Time | Details |
|---|---|
|
2026-03-13 18:16 |
AI Agent Flags Exposed Databases: Supabase and Firestore Incidents Reveal 222K Emails — Security Analysis and 2026 Lessons
According to @galnagli on X, an AI agent discovered two misconfigured databases—moltbook on Supabase exposing 35K emails and RentAHuman on Firestore exposing 187K emails—both shipped without security rules and fixed before reported harm. As reported by Wiz, the moltbook exposure additionally revealed millions of API keys due to public database access and lack of row-level security, underscoring how rapid prototyping with managed backends can create severe data leakage risks. According to Wiz, enforcing default deny rules, enabling Supabase RLS, and hardening Firebase security rules can reduce blast radius, while integrating automated AI security agents into CI/CD offers a scalable guardrail for startups shipping fast. |
