Railway says stolen customer AI keys drove $740,000 in unauthorized charges
An attacker decrypted secrets in at most about 100,000 workspaces; Railway will cover some charges providers will not refund.
Stories per day · 30 days
1 RSS
Relatedandroid1api-keys1k0s1kernel1konnectivity1kubernetes1linux1lpe1paas1privilege-escalation1railway1secrets1tenant-isolation1unauthorized-charges1
15 stories, newest first · one card per story
Stories tagged #container-escape
Privileged-pod chain bypassed tenant isolation in anonymized cloud
A regular tenant reached worker-node root on managed Kubernetes v1.25.16+k0s.0; the provider fixed every reported issue.
6
Infinity Core: Linux Kernel Core LPEs
Researchers disclosed six Linux kernel flaws enabling local privilege escalation, container escape, and Android compromise.
CopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access
CopyEscape, CVE-2026-17106, lets malicious containers overwrite host files through Docker's archive copy path.
16
Docker CopyEscape CVE-2026-17106 Lets Malicious Containers Overwrite Host Files
Docker patches CopyEscape (CVE-2026-17106), which lets malicious containers overwrite host files during docker cp via a symlink race, potentially enabling root code execution.
12
Containers Are No Longer a Security Boundary
DepthFirst showed CVE-2026-80521, a Linux AF_UNIX use-after-free, can escape containers sharing the host kernel.
6
Hackers Turn an Open-Source AI Agent Into a Tool for Controlling Compromised Docker Servers
CARBONATO botnet hijacks exposed Docker servers and uses Hermes Agent for operator control.
How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail
Researcher details CVE-2025-39964, an AF_ALG race that gave unprivileged Linux users root and a $113,337 kernelCTF prize.
14-Year-Old Linux Kernel Flaw Lets Local Users Gain Root Access and Escape Containers
Linux kernel bug CVE-2025-39964 gives local users root and can escape Docker; CISA reports exploitation.
14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape
Linux kernel flaw CVE-2025-39964 enables local root and Docker escape and is listed in CISA's KEV catalog.
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
Unpatched Linux kernel flaw (CVE-2026-80521) enables container escape to host root, with exploit code released for Ubuntu.
6
When Ransomware Targets AI Models: Defending the AI/ML Recovery Chain
Sysdig's JADEPUFFER ransomware campaign deployed the ENCFORGE Go binary via Langflow CVE-2025-3248 to encrypt AI models, datasets, and vector stores for destruction-based extortion.
4
Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files
Docker fixed two symlink-race flaws in Docker Sandboxes, CVE-2026-77179 and CVE-2026-79994, letting malicious guests escape the workspace and read host files; fixed in 0.42.0.
4
Dell Secure Connect Gateway Critical Flaws Allow Unauthenticated Remote Code Execution and Admin Access
Dell patched three critical Secure Connect Gateway flaws (CVE-2026-80172 up to CVSS 9.8) enabling unauthenticated admin access, remote code execution, and host takeover.
2
How to correlate Kubernetes audit logs with container runtime data
Elastic Security Labs shows how to join Kubernetes audit logs with Defend for Containers runtime data to investigate service account abuse and container escapes.
7