Data Breaches
Railway Users Must Rotate Secrets After Potential Environment Variable Breach
Cloud platform Railway warns that attackers may have accessed decrypted credentials, urging all users to rotate API keys and database passwords immediately.
API keys
Everything Phish Herald has reported about API keys: 2 stories, newest first. Part of our Data Breaches coverage.
Data Breaches
OpenCode Users Face API Key Exposure Risk After Legacy System Breach Tied to Distillation Attack
A small fraction of OpenCode Console users face potential exposure of third-party API keys after an unauthorised access incident involving a legacy system.