Fireworks says hackers stole billing and AI data in October breaches
A second October 23 cloud-host intrusion reached development machines, and Notion cut Fireworks off after possible customer-data access.
Stories per day · 30 days
12 RSS
Relatedcredential-theft7llmjacking6aws5data-breach5iam4ai-agents3akamai3api-keys3credentials3japan3outage3qubole3railway3unauthorized-access3agentic-ai2ai-infrastructure2anthropic2artex2
92 stories, newest first · one card per story
Stories tagged #cloud
Attackers used Qubole AWS credentials to raid customer clouds
From October 14 to 26 the actor assumed trusted roles, harvested secrets and downloaded S3 data from dozens of victims.
Akamai pitches Functions as edge-native serverless
The November 10 post frames Akamai Functions as a cheaper alternative to centralized serverless compute.
Iris Plaza cloud breach may expose data of 7.7 million people
About 5.8 million members and 1.9 million non-members may be affected; card data was not in the cloud store.
1
Russian host Beget rebuilds after data-wiper attack on cloud
A week later, 60% of shared hosting and 40% of managed dedicated servers were restored; VPS file backups exist for about half of users.
Railway AI agents probed rival Primcloud; access was blocked
A Railway engineer’s harness sent 24 commands in 15 minutes, including a full internal scan, then he stopped it.
Google Warns LLMjacking Attacks Cost Enterprises Up to $1M
Threat actors hijack LLM API keys to fraudulently consume expensive cloud resources with daily charges exceeding $100,000.
1
Suntory Holdings reports leak of personal data for around 100,000 people
Leading Japanese beverage maker Suntory confirms unauthorized access to external cloud service exposed names and email addresses of approximately 100,000 individuals.
Trigger.dev exposes environment variables in security incident
Customers of Trigger.dev's AI workflow platform had environment variables exposed, with affected organizations notified and steps to take provided.
1
Stolen LLM API tokens driving illicit charges above $100,000 a day
Mandiant says some victims reached about $1 million before cutting access; one intruder made over 500,000 calls in under eight hours.
1
Northflank breach leads to abuse of customers' AI API keys
Customers must assume environment variables were decrypted; Northflank has not said how attackers got in or how many were affected.
1
Akamai investigates Linode exposure to RCE CVE-2026-98432
The status page says mitigation is underway and the platform is being monitored, with no confirmed compromise.
Investors sour on Big Tech's $740 billion AI infrastructure spend
Alphabet, Amazon and Meta reported negative free cash flow as chip stocks and the Nasdaq sold off Friday.
1
Northflank status page lists major outages across core services
Networking, certificates, services, addons, jobs, builds, and logs are down, while the app and API remain operational.
Jassy says AWS can reach $1T revenue after heavy AI infrastructure spending
Amazon still expects about $220 billion cash capex in 2026, mostly for AWS, and more in 2027.
Wiz says AI agents are running hands-on intrusions
Named cases include ARTEX at Korean banks and ConnectWise, Hermes at Thailand's finance ministry, and AI-assisted API attacks in Japan.
1
Wiz says AI agents are doing hands-on intrusion work
Named cases include ARTEX and Hermes, plus three Wiz investigations that begin with an exposed Flowise service.
2
Akamai says it is scaling cloud and Blackwell GPU capacity
The October 29 update outlines GPU capacity growth and moving real-time data closer to AI applications.
Microsoft recorded $10 billion in quarterly revenue from OpenAI
That is nearly 11% of Microsoft’s $92.3 billion quarter; fiscal 2026 OpenAI revenue was $24.1 billion.
Microsoft posts tenth straight record quarter at $92.3 billion
Net income rose 32% to $36.6 billion, Microsoft Cloud grew 30% to $63.9 billion, and OpenAI revenue was $10 billion.
Railway urges all users to rotate keys after secrets were accessed
Hackers may have decrypted environment variables for a subset of users; Railway paused deployments while it investigates.
Multi-exit networks can leak input properties through exit latency
A malicious cloud provider crafts the model so target inputs use a distinct exit, then reads that exit from per-query latency.
Railway says customer environment-variable secrets may be exposed
Deployments are paused, and Railway told every user to rotate API keys and registry credentials while it identifies affected accounts.
PingCAP says TiDB breach copied source code and customer business data
Stolen service-account credentials allowed access from September 9 to October 7; customer databases were not accessed.