Back Rohan Paul

Rohan Paul· @rohanpaul_ai · X· 2026-10-22 22:19 · Original publication time AI score53

Railway tells all customers to rotate secrets and freezes deployments; OpenCode reports a separate key exposure riskMachine translation

Automatically verified and published · Generated and evidence-checked automatically; not reviewed by a human.

AI introduction

Developer platform Railway told all customers to rotate their secrets. Railway said a subset of users may be affected, but it froze all deployments and reset bucket keys and GitHub tokens; days earlier, OpenCode said a breach may have exposed OpenAI, Anthropic and Google keys saved by 1.4% of Console users.

Original post · AI translation

Rohan Paul@rohanpaul_ai

Translation · refer to the original

开发者平台 Railway 告知所有客户轮换全部密钥，此前一名入侵者解密了部分已存储的凭据。

这些环境变量存有数据库密码、云服务密钥和模型 API 密钥，持有它们的人可以以所有者身份登录。

Railway 表示，部分用户可能受到影响，但它仍冻结了所有部署，并自行重置了存储桶密钥和 GitHub 令牌。

该公司称，这次入侵与一系列针对服务于 AI 推理提供商的平台的攻击有关，并要求这些提供商撤销密钥。

几天前，OpenCode 将一起可能暴露了 1.4% 的 Console 用户所保存的 OpenAI、Anthropic 和 Google 密钥的安全事件归咎于蒸馏攻击。

被盗密钥让攻击者能够收集前沿模型的回答，用于训练竞争模型，而账单则由受害者支付。

22:19 · 2026-10-22 · UTC+8

Found an error? Send a correction