Skip to content
securitytabs

Covered by 2 outlets — first reported by The Hacker News, Oct 22, 11:15 UTC

Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

In brief

Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment variables, and, in some cases, obtained the decrypted contents. The impact, it said, is limited to a "subset of users,

From The Hacker News's coverage.

Continue reading

2 outlets, in the order they reported it.

  1. The Hacker NewsFirst report

    Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

    Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables.

    Read at The Hacker News Details

  2. BleepingComputer

    Railway warns devs to rotate secrets after potential breach

    Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week.

    Read at BleepingComputer Details