
Railway Warns Customer Secrets May Be Exposed and Urges Credential Rotation
Railway warns an intruder may have accessed encrypted environment variables and urges customers to rotate secrets and review logs for unusual activity.

Railway warns an intruder may have accessed encrypted environment variables and urges customers to rotate secrets and review logs for unusual activity.

GMO shut down Desktop Cloud after unauthorized access potentially exposed up to 26,739 servers, with unauthorized programs in some environments.

ConnectWise suspended Cloud Backup after attackers abused app identities to access Microsoft 365 tenants, disabling connections pending review.

Huntress reports unknown actors used a compromised ConnectWise Cloud Backup credential for unauthorized sign-ins to 173 Microsoft 365 tenants.

Cyberattack on BAE Systems disrupted federal bankruptcy notice systems, halting online access and notice distribution as investigation continues.

Three Yandex data centers were hit by drones in a week, forcing shutdowns, emergency mode and disruptions to cloud customers and consumer services.

Microsoft plans Teams integration with third-party deepfake detection and impersonation warnings for meetings, both features currently in development.

Microsoft links JadePuffer to destructive Azure attacks using stolen service principals to delete storage, Key Vaults and apps in minutes.

Cloudflare fixed a Containers flaw leaking residual disk data across tenants, erasing reused blocks by Sept 19, 2026. No action needed.