Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Supabase Data Exposure | 16,000+ Open Databases and What Security Teams Can Do

Oct 8, 2026 By UpGuard In UpGuard
We found more than 16,000 Supabase databases sitting wide open, and over half held personal data like names, phone numbers and passwords. The organizations behind them ranged from a valet service to a government consulate, and in many cases the owners never checked the settings AI wrote. What is the Supabase data exposure? Anyone visiting these sites could read the data in their databases. Many belong to vibe-coded apps, where AI coding tools often handle the database setup.
View Video
Torq

Buying an AI SOC Isn't Like Anything You've Bought Before

Oct 8, 2026 By John White In Torq
John White is the Field CISO for EMEA at Torq. A respected security executive with more than 20 years of leadership experience, John previously served as CISO at Virgin Atlantic, where he led a multi-year transformation deploying the Torq AI SOC Platform to modernize cyber operations. Prior to Virgin Atlantic, he built and transformed security functions for global organizations, including ASOS, Liberty Global, AEG Europe, and KPMG.
Read Post
upguard

Security Posture Monitoring and Board Reporting Tools

Oct 8, 2026 By Abi Tyas Tunggal In UpGuard
Every quarter, your board asks the same question, just phrased differently: Are we more secure than we were last time? A point-in-time assessment can't answer it, because it shows where you stood on the day someone ran it, not which way things are moving. Security posture monitoring is the correct response to give to the board. This guide answers the three questions behind every board pack: what goes in front of the board, where the number comes from, and how you show it moved.
Read Post
Featured Post
What happens when a patch can't wait until next Tuesday?

What happens when a patch can't wait until next Tuesday?

Oct 8, 2026 By Katie Barnett, Director of Cyber Security, Toro Solutions In SecuritySenses
Most organisations patch on a schedule. For the majority of vulnerabilities, that makes sense. Updates need testing, maintenance windows need planning and nobody wants to cause an outage while trying to fix a security problem. But what happens when something can't wait? That's the bit I think organisations need to be looking at more closely, particularly as AI starts to change how quickly vulnerabilities can be found and analysed.
Read Post
Managing Third-Party Cyber Risks in Complex Supply Chains

Managing Third-Party Cyber Risks in Complex Supply Chains

Oct 8, 2026 By SecuritySenses In SecuritySenses
Big breaches often start somewhere boring. A refrigeration contractor with remote access to the network (Target, 2013). A file-transfer tool nobody on the security team had thought about in years (MOVEit, 2023). A compression library buried four layers deep in a Linux distro. Meanwhile most vendor reviews still run on an Excel questionnaire that gets filled in once, filed and forgotten, and attackers know that perfectly well.
Read Post
Key Security Considerations When Choosing a Learning Experience Platform

Key Security Considerations When Choosing a Learning Experience Platform

Oct 8, 2026 By SecuritySenses In SecuritySenses
Most learning platform purchases run on the same timeline. Somebody in L&D builds a shortlist, the demos go well, a budget gets signed off, and then four days before contract somebody from security asks who exactly can see the course completion data. That question should have been asked in week one, because the answer sometimes changes the shortlist.
Read Post
7 Tools to Download Instagram Videos: Privacy and Security Features Compared

7 Tools to Download Instagram Videos: Privacy and Security Features Compared

Oct 8, 2026 By SecuritySenses In SecuritySenses
Downloading an Instagram video does not always require installing an app or signing into another service. For public content, you can also use an online Instagram downloader that is completely free and does not require a software install by copying and processing the Instagram link.
Read Post

Which EU Regulations Apply to Your Business EU AI Act, DORA, NIS2 & CRA

Oct 7, 2026 By VISTA InfoSec In VISTA InfoSec
Which European regulations could affect your organisation? Depending on your business activities, products, customers and operations, you may need to consider regulations such as the EU AI Act, DORA, NIS2 Directive, Cyber Resilience Act (CRA) and other European regulatory requirements. The VISTA Regulatory Exposure Check is designed to help organisations get an initial indication of which regulatory areas may deserve further investigation.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.