Railway hit by major breach: attackers draining API keys in real time, users urged to rotate now
AaronBergman18 · x · 2026-10-22
Deploy platform Railway appears massively compromised: developer @varunram reports attackers are draining API keys in real time and urges all users to rotate every key immediately—deployments are down and redeploying won't help; the report describes an active, ongoing attack.
Railway's status page shows a "Major Outage" affecting builds in all regions and the API; OAuth sessions are being invalidated as mitigation and users must re-login, with access being restored in stages: Enterprise → Pro → Hobby → Free/Trial. An immediate risk alert for any developer with secrets hosted on third-party deploy platforms.
More from Infra
- SF Systems Meetup: Agents-Only Version Control and Postgres Rewritten in Rust — ShadajL · 2026-10-22
- Cloudflare saw thousands of php2shell exploit attempts before disclosure, millions now — ivan_bezdomny · 2026-10-22
- Jensen Huang: NVIDIA Is "Literally the Only One" You Can Trust With a $100B Blind Chip Order — jfischoff · 2026-10-22
- Dual RTX PRO 6000 Benchmarks: DeepSeek-V4-Flash vs Qwen3.8-27B Local Serving — dee_hw · 2026-10-22
- Korean neocloud Elice now up 68% from IPO-day low — the panic headlines have gone quiet — firstadopter · 2026-10-22
- Berth v0.3.4 adds GPU VFIO passthrough: lend your 4090 to a Windows VM and get it back — Distinct-Pie2389 · 2026-10-22