Security · High impactFan score 46 · Tier B4 sources

In a report, Railway says it believes the October hack targeted AI provider keys for resale, and unauthorized spend on the stolen keys was estimated at ~$740K (Lawrence Abrams/BleepingComputer)

The Brief · written from 4 sources

Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets.
The stolen keys were used for roughly $740,000 in fraudulent AI usage, and Railway believes the hack targeted AI provider keys for resale.
Credentials for up to 100,000 workspaces may have been exposed.

Why it matters

If you host workloads on Railway, any secrets stored there, including AI provider keys, may have been exposed and could be misused to run up charges or access other systems.

Who’s affected

Railway customers
Teams storing AI provider keys or other secrets in Railway workspaces
CI/CD teams relying on OIDC trust with Railway

What to do

Review and rotate credentials stored in Railway workspaces
Review build access and tighten OIDC trust, as recommended by Step Security
Monitor AI provider usage for unauthorized spend

Lawrence Abrams / BleepingComputer : In a report, Railway says it believes the October hack targeted AI provider keys for resale, and unauthorized spend on the stolen keys was estimated at ~$740K — Cloud hosting provider Railway says hackers exploited vulnerabilities in its…

Read the full story at techmeme.com ↗