Railway discloses server compromise, urges all users to rotate their keys
josh_bickett · x · 2026-10-22
Railway has disclosed that malicious activity compromised its servers, according to an urgent notice from the team. The company is sharing the incident broadly and swiftly and recommends all users rotate their keys out of an abundance of caution. Developers deploying on Railway should check and rotate credentials immediately.
Related event: Railway breach exposes encrypted env vars, users urged to rotate all keys(11 posts)→
More from Safety
- Veteran vuln researcher: agents will soon find zero-days by pointing at a source tree — teropa · 2026-10-22
- Claimed unpatchable PyTorch autograd zero-day runs arbitrary code via SGD — burny_tech · 2026-10-22
- Twitter product lead: the real AI threat is humans using AI to hurt humans — nikitabier · 2026-10-22
- Greentext dev nightmare: php2shell, GitLab patch, opencode breach, LiteLLM supply chain hit in one day — Bedrovelsen · 2026-10-22
- Team-shared AI agent permissions: a Slack bot quietly hands everyone its database access — Careless_Love_3213 · 2026-10-22
- Crypto keys drained from Railway: $371K swept across 500+ txns on 19+ EVM chains — banteg · 2026-10-22