
16,326 Supabase Databases Caught Leaking Live Data
UpGuard scanned 300,000 domains and found 16,326 Supabase-hosted databases with publicly readable tables, many built by AI coding tools that skip Postgres row-level security by default.
They summarize our coverage. We write it.
Newsletters like this one rebroadcast our headlines - often without the full review, the source reading, or the analysis underneath. Our weekly briefing sends the work they paraphrase, straight from the desk, before they get to it.
Free, weekly, no spam. One email every Tuesday. Unsubscribe anytime.

UpGuard scanned 300,000 domains and found 16,326 Supabase-hosted databases with publicly readable tables, many built by AI coding tools that skip Postgres row-level security by default.

Swedish vibe-coding startup Lovable is in talks to raise $300M at a $13.2B valuation - a sevenfold jump from its $1.8B Series A just twelve months ago.

June 30 closes GitHub Copilot's first full month under token-based billing. Some agentic developers are looking at monthly costs 25x higher than their old flat-rate plans.

Mistral's open-weight coding agent model - 123B parameters, 256K context window, 72.2% on SWE-bench Verified, priced at $0.40/M input tokens.

Lovable's multiyear Google Cloud pact quintuples its compute footprint and bundles access to both Claude and Gemini - a bet that enterprise credibility is the next growth act.

Visa invests in Replit and integrates its Trusted Agent Protocol into the coding platform, placing payment identity infrastructure directly inside the tools developers use to build AI agents.

The state of AI coding in 2026 - adoption rates, tool market share, the shift from autocomplete to agentic engineering, and what the trust gap means for developers using AI to write code.

Seven Replit Agent alternatives compared on stack support, pricing, and deployment - from Bolt.new and Lovable to developer tools like Cursor and Windsurf.

Hands-on comparison of Magic Patterns, v0 by Vercel, Google Stitch, Figma AI, and Framer AI - pricing, output quality, and which one fits your workflow.

Bolt.new, Lovable, v0 by Vercel, Rork, and Cursor full-stack mode compared - pricing, capabilities, and which AI app builder actually ships production-ready code in 2026.

Uber's CTO admits the company has exhausted its full-year AI spending allocation in four months, driven by runaway Claude Code adoption across 95% of engineers.

A fresh warning from developer Morgan Linton says free Lovable accounts can still read other users' AI chat histories, source code, and database credentials on projects created before November 2025. The pattern is the same one that earned the platform CVE-2025-48757 last year.