Cloud development and deployment platform Railway has issued an urgent security alert instructing all users to revoke and rotate their secret keys and API tokens. The emergency advisory follows a cyberattack that compromised internal infrastructure and exposed sensitive configuration data. Security teams are currently investigating the full scope of the breach to determine what customer repositories or environment variables may have been accessed. Affected developers have been advised to audit their access logs, invalidate existing credentials, and generate new authentication tokens immediately. The incident highlights ongoing vulnerabilities in developer toolchains as malicious actors increasingly target software supply chain infrastructure.

Full report : Cloud deployment service scrambles to contain a security breach, advising developers to immediately rotate credentials and API tokens.