Northflank discloses breach affecting AI API keys and environment variables
1 Oct 30 11:10 AM · 12d ago · 1 post · 5 comments · 1 source · development 1 of 3
Northflank posted a status update confirming that users reported unauthorised use of AI API keys supplied to the platform. The company advised all customers to assume all environment variables have been compromised and to immediately rotate secrets, revoke credentials with providers, and review usage logs for suspicious activity.
“All users should assume their environment variables are decrypted and begin rotation immediately.”
NorthflankNorthflank Compromised deployment platform
The whole story postscomments the bright band is this development · numbered dots are the others · click one to jump
What people said 4 voices · best of 5 · verbatim
-
Unfortunately for infra startups, I think we're going to see a convergence back to hyperscalers as a result of incidents like this and railway.There's no amount of "nicer to use" that can replace security, at least certainly when selling to enterprises
-
How these Paas (Railway before) are being breached? Poor choices or something else? Scary Nonetheless. I thought AI advancement will make the self hosting painful. If PaaS are no good, then what can be done?
-
Are hyperscalers actually more secure though? I have only heard anecdotal thinking eg nobody ever got fired for choosing IBM.
-
i'm surprised at the growth of all these neoclouds given the current security risk climate...
All 3 developments of Northflank confirms breach; AI API keys stolen amid wave of… →
Hacker News