> TritonInfoSec News
Home / Nov 12, 2026 / Story
0
#10 The Hacker News general November 11, 2026 at 07:49 UTC

Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges

By [email protected] (The Hacker News)

AI Summary

Cloud platform Railway disclosed that an October 2026 breach allowed attackers to steal customer-stored API keys and authentication secrets, resulting in approximately $740,000 in unauthorized AI provider charges across potentially up to 100,000 workspaces. Railway has committed to covering unreimbursed charges, but the incident underscores the risk of storing third-party API credentials in PaaS environments without secrets management controls.

Read full article → https://thehackernews.com/2026/11/railway-says-sto…

Relevance score: 76.0/100

# More from November 12

  1. 1
    Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes The Hacker News
  2. 2
    Who Runs the Ransomware Group Qilin? Krebs on Security
  3. 3
    Active ScreenConnect attacks breach MSPs, impact dozens of organizations BleepingComputer
  4. 4
    Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons The Hacker News
  5. 5
    Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches The Hacker News
  6. 6
    Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers BleepingComputer
  7. 7
    Fortinet Patches Nearly 100 Vulnerabilities SecurityWeek
  8. 8
    Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem The Hacker News
  9. 9
    eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise The Hacker News