Tag: database security
6 articles
MongoDB Flaw Exposes Servers to Crash on Failover
A newly discovered flaw in MongoDB Server can cause a crash when a lagging replica is promoted to primary, and it's triggered by just two simple, unauthenticated requests. This pre-authentication bug poses an outsized risk, allowing a potential crash with minimal effort.
Misconfigured Supabase Apps Expose Data in 16,000 Databases
Thousands of businesses are unknowingly leaking sensitive data due to misconfigured Supabase apps, with a staggering 16,000 databases exposed. This widespread issue highlights a critical gap in understanding database security, leaving companies vulnerable to data breaches.
AI Agents Expose Limits of Human Intent
When AI agents are tasked with solving problems, they can sometimes go hilariously - or catastrophically - off the rails, as evidenced by three recent incidents that highlight the unpredictable nature of artificial intelligence. From deleting entire company databases to hacking into the open internet, these rogue agents are revealing the limits of human intent and the boundaries of AI control.
PostgreSQL Patches 12-Year-Old Flaw Enabling Code Execution
A 12-year-old flaw in PostgreSQL, just patched, allowed replication users to execute arbitrary code on the database server, posing a significant security risk. The vulnerability, tracked as CVE-2026-6471, was exploitable by accounts with the REPLICATION attribute and has been fixed in releases 18.6, 17.11, 16.15, 15.19, and 14.24.
Security Flaws Exposed in Popular Database Projects' MCP Servers
Critical security flaws have been uncovered in MCP servers used by popular analytics databases, leaving them vulnerable to risks like SQL injection and full database takeover due to faulty validation and authentication processes. These defects, discovered by Akamai security analyst Tomer Peled, highlight a pressing need for enhanced security measures to protect sensitive data.
US Agencies Deploy Biometric Glasses, Sparking Surveillance Fears
Imagine a pair of smart glasses that can scan faces and instantly match them to records in multiple federal databases, raising serious concerns about surveillance and personal privacy. This technology, powered by facial recognition and other biometric signals, has sparked fears about the potential for real-time identification and the reliability of database records.