NowRift — Software & Technology News Platform

CybersecurityRIFT LEAD

Supabase Anon Key Vulnerability Exposes User Data

A common Supabase security policy allows the anon key to read sensitive user data, bypassing intended restrictions.

29 Aug 2026

Newsletter

THE DAILY RIFT

Five shifts. Five minutes. No noise.

•Verified technology intelligence
•Emerging patterns before the hype
•Direct action steps for builders & founders

No spam. Unsubscribe anytime. Powered by Beehiiv.

All Intelligence AI Models Developers Cybersecurity Hardware Founders Creators Data Science

Today's Intelligence

CybersecurityAug 29

Alpine Containers' BusyBox Base Creates Hidden Security Risk

Small container images often use BusyBox, which bundles utilities, creating a wide attack surface for single vulnerabilities.

●Builder Action:Developers using Alpine Linux should understand that BusyBox consolidates many core Unix utilities into a single binary. A vulnerability in BusyBox can thus expose a wide range of functionalities, not just a single package. This means that even minimal Alpine images might have a larger attack surface than apparent from standard CVE scans. Consider alternative base images if granular security control over individual utilities is paramount.

CybersecurityAug 29

Sleepwalker: New Passive Backdoor Uses Custom Command Language

Researchers unveil 'Sleepwalker,' a stealthy backdoor malware that evades detection by using a unique, encrypted command and control language.

●Builder Action:Developers should be aware that custom, encrypted C2 protocols like Sleepwalker's can bypass traditional network security tools. Implement robust logging and anomaly detection within your applications and infrastructure. Consider building in self-checking mechanisms or out-of-band communication channels for critical services that could be compromised.

CybersecurityAug 29

GrapheneOS Ditches Pixel 11 Support for Hardware Memory Tagging

GrapheneOS removes support for Pixel 11's Memory Tagging, citing reliability and security concerns with the hardware.

●Builder Action:Developers relying on MTE for debugging memory corruption issues on Pixel 11 with GrapheneOS will need to find alternative debugging strategies. GrapheneOS's robust software mitigations remain, but the hardware-assisted MTE capabilities are now offline. This decision highlights the importance of validating hardware security features in real-world, hardened OS environments.