Misconfigured Supabase apps expose data in over 16,000 databases

The feed reports multiple significant cybersecurity events, led by the exploitation of critical Citrix NetScaler zero-day remote-code-execution vulnerabilities (CVE-2026-88771 and CVE-2026-88772), prompting CISA emergency patching requirements. Other notable incidents include widespread Supabase data exposure caused by misconfiguration, Azure-targeting ransomware activity by JadePuffer, stolen AI credentials enabling account compromise and LLMjacking, a major cryptocurrency exchange heist, exploitation of Oracle PeopleSoft CVE-2026-35273 using WAF bypass techniques, a compromised GitHub Action