In this post, we show how an attacker can exploit Supabase’s MCP integration to leak a developer’s private SQL tables. Model Context Protocol (MCP) has emerged as a standard way for LLMs to interact with external tools. While this unlocks new capabilities, it also introduces new risk surfaces.
Recent Stories
Autonomous cars, drones cheerfully obey prompt injection by road sign
: AI vision systems can be very literal readers
Jan 31, 2026NVIDIA is still planning to make a ‘huge’ investment in OpenAI, CEO says
Bloomberg reports that CEO Jensen Huang said NVIDIA's investment in OpenAI could be the largest the company has ever made.
Jan 31, 2026AI Agent Engineer at CollectWise
About Us CollectWise is a fast growing and well funded Y Combinator-backed startup. We’re using generative AI to automate debt collection, a $35B market in the US alone. Our AI agents are already outperforming human collectors by 2X, and we’re doing so at a fraction of the cost. With a team of three, we scaled to a $1 million annualized run rate in just a few months, and we are now hiring an AI Agent Engineer to help us reach $10 million within the next year. Role We are hiring an AI Agent Engineer to design, optimize, and productionize the...