Northflank, a cloud platform for deploying apps, containers and AI workloads, is telling customers to assume all environment variables have been decrypted and to rotate every key and secret they stored there.
What we know
- Wiz alerted Northflank at 11:43 UTC on October 30, and Northflank pushed network policy patches over the next 90 minutes.
- Several customers have already reported unauthorized use of AI API keys they had stored on the platform.
- Northflank hasn’t said how the attackers got in or how many customers were hit.
What to do
If you use Northflank, rotate every user-provided secret now, not just AI keys: database passwords, cloud credentials, tokens. Then check your AI providers’ usage and billing logs for anything you didn’t run.
My take
AI keys are the new credit card numbers. They turn straight into money for whoever steals them. Give every app and bot its own key with a spend cap, so one breach can’t drain everything. Until Northflank explains the root cause, this one isn’t fully right.
God Bless, and Needs Garlic!
