ME News, October 22 (UTC+8): According to an official announcement from Railway, the cloud deployment platform detected anomalous activity in its system storing customer environment variables. Preliminary investigations suggest that an unauthorized third party may have accessed encrypted environment variables and obtained decrypted contents of some of them; these variables may have included API keys, database credentials, and image repository credentials. Railway considers this incident part of a recent series of attacks targeting platform companies aimed at compromising AI inference service providers, and has notified upstream service providers to proactively revoke the compromised keys. Railway has currently suspended all deployments and advises all users to immediately rotate environment variables, API keys, and private repository credentials stored on the platform, and to review relevant service logs. (Source: ChainCatcher)
Cloud Deployment Platform Railway Reports Unauthorized Access to Environment Variables
KuCoinFlashShare
Summary
On-chain news reports that the cloud deployment platform Railway detected unauthorized access to customer environment variables on October 22 (UTC+8). Preliminary findings indicate that encrypted variables were accessed and decrypted, potentially exposing API keys and database credentials. Railway attributes the breach to a recent surge of attacks targeting the AI and crypto news sectors. The company has paused deployments and urged users to rotate their credentials. Affected keys have been revoked, and logs should be reviewed.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.