Railway confirmed that hackers accessed secret data belonging to some customers.
The company says stored encrypted settings may have been accessed and, in some cases, their decrypted contents.
These settings typically hold credentials apps use to connect to databases and other services.
Railway has paused customer deployments during its investigation and advised all users to revoke and replace their keys.
Railway's initial analysis suggests that only a portion of its users may have been affected. The company has not announced how many.
Hackers may have gained access to stored settings. These typically contain passwords and digital keys that apps use to connect to other services, such as storage and databases. The settings were encrypted, but in some cases hackers may have been able to read their contents. If someone gets their hands on these details, they can log in to the services and view data as if they were the legitimate owner.
Railway has temporarily halted app publishing while it investigates the incident. While the pause lasts, its customers cannot publish changes to their websites and apps. The company has not announced what caused the attack or how it happened.
READ ALSO
Nearly 130.000 cases of identity fraud in the UK in six months
Possible connection to other attacks
Railway believes the attack may be part of a wider effort to target services that rely on artificial intelligence systems. In such attacks, attackers send special messages that try to trick the systems into revealing information that they should normally protect. It has not been confirmed that this was how the attack on Railway was carried out.
The US CISA agency had warned that China-based artificial intelligence companies were carrying out large-scale attacks on American companies, aiming to improve their own models.
Earlier this week, OpenCode, an artificial intelligence programming tool, said hackers had obtained more than 1% of its customers' digital keys and other secrets. OpenCode attributed its own attack to an attempt to extract information from artificial intelligence systems with the help of multiple automated programs.
The attack on Railway appears to be separate from two serious security flaws revealed in the PHP programming language in the same week.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)