Northflank breach exposes customer secrets and leads to abuse of stolen AI API keys (LLMJacking)
Northflank, a cloud application hosting platform, disclosed a security incident on October 30 after a threat alert from Wiz. The company told customers to assume all environment variables were decrypted and the secrets in them stolen, and to rotate all credentials. Multiple customers later reported unauthorized use of AI API keys stored on the platform. Northflank has not disclosed the intrusion vector, the number of affected customers, or whether credentials other than AI API keys were abused. The incident is one of at least nine affecting AI developer platforms in October, which Wiz documented in its report "Black October for AI Developer Platforms".
Detalhes técnicos
- Wiz alerted Northflank at 11:43 UTC on October 30. Engineers reviewed the alert one minute later and shipped a network policy patch, followed by further patches at 12:50 and 13:05 UTC. Wiz's incident response team was brought in.
- Stolen environment variables can hold database passwords, cloud credentials, tokens and API keys, enabling follow-on compromise and fraudulent charges.
- Wiz links the wave of incidents to LLMJacking: abusing stolen AI credentials to run models at the victim's expense or to resell access. The affected platforms include Northflank, Railway, OpenCode, Warp and Lightning AI. Railway potentially exposed decrypted environment variables, OpenCode exposed AI API keys, and Warp exposed AI agent logs and telemetry.
- In two cases Wiz investigated, compromised enterprise credentials were used for about 2.5 million Amazon Bedrock API calls, generating roughly $100,000 in usage. Wiz also found infrastructure tied to services reselling AI model access, but could not link it to the initial breaches.
- Wiz has not confirmed that the nine incidents share the same attackers.
Remediação
- Rotate all secrets in workloads, secret groups and global secrets, and disable public access to add-ons where enabled.
- Review AI provider usage and billing logs for unexpected activity, and report suspicious usage to Northflank and the AI provider.
- Northflank enabled credential rotation for PostgreSQL, MongoDB, MySQL and Redis, and turned on audit logs for all customers, including free accounts.
Linha do tempo
-
Northflank breach exposes customer secrets and leads to abuse of stolen AI API keys (LLMJacking)
ler a análise desta fonte ocultar
Northflank, a cloud application hosting platform, disclosed a security incident on October 30 after a threat alert from Wiz. The company told customers to assume all environment variables were decrypted and the secrets in them stolen, and to rotate all credentials. Multiple customers later reported unauthorized use of AI API keys stored on the platform. Northflank has not disclosed the intrusion vector, the number of affected customers, or whether credentials other than AI API keys were abused. The incident is one of at least nine affecting AI developer platforms in October, which Wiz documented in its report "Black October for AI Developer Platforms".
Technical Details
- Wiz alerted Northflank at 11:43 UTC on October 30. Engineers reviewed the alert one minute later and shipped a network policy patch, followed by further patches at 12:50 and 13:05 UTC. Wiz's incident response team was brought in.
- Stolen environment variables can hold database passwords, cloud credentials, tokens and API keys, enabling follow-on compromise and fraudulent charges.
- Wiz links the wave of incidents to LLMJacking: abusing stolen AI credentials to run models at the victim's expense or to resell access. The affected platforms include Northflank, Railway, OpenCode, Warp and Lightning AI. Railway potentially exposed decrypted environment variables, OpenCode exposed AI API keys, and Warp exposed AI agent logs and telemetry.
- In two cases Wiz investigated, compromised enterprise credentials were used for about 2.5 million Amazon Bedrock API calls, generating roughly $100,000 in usage. Wiz also found infrastructure tied to services reselling AI model access, but could not link it to the initial breaches.
- Wiz has not confirmed that the nine incidents share the same attackers.
Remediation
- Rotate all secrets in workloads, secret groups and global secrets, and disable public access to add-ons where enabled.
- Review AI provider usage and billing logs for unexpected activity, and report suspicious usage to Northflank and the AI provider.
- Northflank enabled credential rotation for PostgreSQL, MongoDB, MySQL and Redis, and turned on audit logs for all customers, including free accounts.