云平台Railway于2024年10月21日上午检测到异常活动1。未经授权的第三方可能访问了存储客户环境变量的系统，部分变量的加密内容被解密1。受影响的数据包括API密钥、数据库凭证和注册表凭证等1。
Railway已暂停所有部署作为临时措施1。公司建议用户立即轮换所有环境变量和API密钥，同时审查服务日志1。Railway初步分析认为影响仅限部分用户，但建议所有用户采取预防措施1。同时，Railway调查该事件可能与针对AI推理供应商的系列攻击有关1。
Cloud platform Railway detected unauthorized access to its systems on the morning of October 21, 2024, compromising stored customer environment variables.1 An unidentified third party gained access to the system, and encrypted contents of certain variables were decrypted during the incident.1 Among the exposed data are API keys, database credentials, and registry credentials.1
In response to the breach, Railway has suspended all deployments across the platform, preventing new versions from being released.1 The company has advised all users to immediately rotate their environment variables and API keys, and to review their service logs for suspicious activity.1 While Railway's initial analysis suggests the impact may be limited to a subset of users, the company recommends that all users take preventive measures regardless.1 Railway is investigating whether the incident is connected to a broader series of attacks targeting AI inference providers.1
评论
还没有评论，欢迎留下第一条。