App hosting platform Northflank has told all customers to assume their environment variables were decrypted and to rotate every key, after an alert from Wiz on 30 October, BleepingComputer reports. It later confirmed that customers had reported unauthorised use of AI service API keys. The company switched on credential rotation for databases and audit logs for everyone, without explaining how the breach happened. Wiz counts at least nine incidents at AI development platforms in October.

What it means: API keys for AI models have become one of the most profitable targets because they turn into money immediately: a thief can resell access or run their own jobs, and the bill lands with the rightful owner. Northflank is the latest in a series of platforms holding customer secrets to be breached within a month, which shows attackers are systematically targeting the places where many companies' keys are stored together. For Greek start-ups and teams hosting applications on such services, the company's advice applies without exception: rotate every secret, not just AI keys, and check billing at model providers for unusual usage. It also helps to set spending caps and alerts at each AI provider, use separate keys per application and environment, and prefer short-lived credentials where supported. An incident at a hosting provider that holds customers' personal data may also trigger GDPR notification duties, so documenting the response matters.

Read the original on BleepingComputer

Related service: Custom software

Related stories