Railway says stolen customer AI keys drove $740,000 in unauthorized charges
An attacker decrypted secrets in at most about 100,000 workspaces; Railway will cover some charges providers will not refund.
Stories per day · 30 days
5 RSS
Relatedgithub11railway7supply-chain5airflow4credential-theft4environment-variables4github-actions4ai-agents3anthropic3api-keys3credential-exposure3ci-cd2claude2claude-code2cloud2credentials2gheist2llmjacking2
37 stories, newest first · one card per story
Stories tagged #secrets
Claude Code “Don’t Ask Again” Persists Secrets in GitHub Repositories
Apiiro research exposed 2,539 secrets across 1,994 public GitHub repositories via Claude Code configuration files.
Apache Airflow audit-log secrets masker redacts by key name only
Apache Airflow audit log stored Connection and Variable secret values in cleartext because the secrets masker matched only on configured sensitive key names.
Apache Airflow Task SDK before 1.4.0 allows cross-team secret disclosure (CVE-2026-76185)
Different secret ids can collide in multi-team deployments, disclosing variables or connections.
Secrets in GitHub repositories
Apiiro found 2,539 real secrets in 1,994 public GitHub repositories.
Hackers target 61 GitHub repos with command injection
Coordinated attack on 61 repositories used command injection in GitHub Actions to steal CI/CD secrets; 83 malicious issues and PRs identified.
1
Trigger.dev says attacker accessed some customers' environment variables
The company says it blocked the exploit and emailed affected account owners mitigation steps.
1
Gheist used stolen GitHub tokens to steal secrets from 850 accounts
Workflows on more than 13,500 branches logged secrets; public runs were held, while private and Enterprise Server runs completed.
1
Gheist uses stolen GitHub tokens to leak private repository secrets
Wiz found over 13,500 planted branches from more than 850 accounts; GitHub held public runs but not private ones.
1
Datadog primer explains code security for new and vibe coders
The post contrasts first-party fixes with third-party upgrades and warns agents often pull outdated dependencies.
LiteLLM GitHub secrets taken 11 days before malicious package release
October 10 and 12 workflows posted CI secrets to webhook.site; a key committed May 27 was never revoked.
2
Railway warns developers to rotate secrets after possible breach
An unauthorized party may have decrypted some environment variables; deployments stay paused while builds return in stages.
Railway urges all users to rotate keys after secrets were accessed
Hackers may have decrypted environment variables for a subset of users; Railway paused deployments while it investigates.
Railway says intruder may have read customer environment secrets
A subset of Railway users may have had decrypted API keys and credentials exposed; the company urges rotation and has revoked its own tokens.
Railway says customer environment-variable secrets may be exposed
Deployments are paused, and Railway told every user to rotate API keys and registry credentials while it identifies affected accounts.
Critical ChatGPT GitHub Connector Flaw Could Allow Attackers to Steal Private Repository Secrets
Researcher says ChatGPT’s GitHub connector can be prompt-injected into stealing private repository secrets.
8
AI Agents Create an Unseen Credential Surface That Exposes API Keys and Cloud Secrets
Trellix says normal AI-agent workflows can leak API keys and cloud secrets into logs, transcripts, and model context.
9
AI Agent Workflows Could Expose Credentials Through Trusted Developer Tools
Trellix warns AI agent workflows can leak credentials from vaults into commands, logs, and model context.
6
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
GhostAction compromised about 1,900 GitHub accounts and pushed malicious workflows to steal CI secrets from tens of thousands of repositories.
10
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
GhostAction compromised maintainer accounts to plant credential-stealing GitHub Actions workflows in tens of thousands of repositories.
12
New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets
GhostAction hit 346 GitHub repositories, including Uber's, with malicious Actions workflows that stole CI secrets.
8
Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets
Malicious tensorlake@0.5.144 on npm delivers a Shai-Hulud worm that steals developer secrets and can wipe hosts.
9
GhostAction Supply Chain Campaign Uses Malicious GitHub Actions to Steal CI/CD Credentials
GhostAction hit 772 GitHub repositories with malicious Actions workflows that stole CI/CD secrets.
3
Zeroization, part 1: Wiping can make things worse
Common secret-wiping patterns can add stack copies or erase memory that never held the secret.
5