Northflank
CompanySecurity timeline
- Named in breach reports by SecurityWeekAI-Linked Breaches Mount as WorkOS, Northflank and Trigger.dev Disclose Hacks
- Named in breach reports by BleepingComputerNorthflank investigates misuse of AI keys and urges customers to rotate secrets
Recent news
AI-Linked Breaches Mount as WorkOS, Northflank and Trigger.dev Disclose Hacks
WorkOS, Northflank and Trigger.dev have disclosed breaches, part of a growing set of AI-linked incidents. The article reports that attackers are harvesting AI access tokens and using AI-assisted offensive tools to automate attacks, but gives no detail on the intrusion methods, scope or timelines.
Northflank investigates misuse of AI keys and urges customers to rotate secrets
Northflank is investigating reported misuse of AI API keys and has told customers to treat environment variables, secret groups and global settings as potentially compromised. The entry point, the attacker and the affected customers are not yet confirmed, and the company's timeline does not explain what its network policy patches fixed. Wiz's threat alert and incident response team were involved, and the company says the activity may fit a wider pattern of LLMjacking seen across AI developer platforms, as well as the recent Railway incident.