# Northflank tells customers to treat every environment secret as leaked > Source: > Published: 2026-10-31 11:08:40+00:00 Users report their AI API keys have already been used, so the exposed keys are being spent, not only read. Every secret in workloads, secret groups and global secrets is affected, which makes this a full credential rotation for each Northflank team. Read: Users report their AI API keys have already been used, so the exposed keys are being spent, not only read. Every secret in workloads, secret groups and global secrets is affected, which makes this a full credential rotation for each Northflank team. Read: The release dropped SSH keys and persistence on macOS, Linux and Windows. IDE extensions run with the user's full file access, and the persistence outlives the extension, so any machine that installed it is compromised. Read: Prices stay at $100 and $200 and weekly limits are unchanged. Verified Ultra accounts no longer pause at the rolling 5-hour window, so a long Claude Code session runs until the weekly allowance, while newer accounts keep a temporary cap. Read: Agents can now write to Figma files through use_figma, and what they create is tied to the team's design system. Coinbase measured about 22.5% lower token cost from component mappings, and pricing moves from free beta to usage-based. Read: The datasets that worked hid misalignment inside fiction and roleplay, which a production-style monitor read as harmless. A screen that judges fine-tuning data by surface content therefore misses this class of poison, and agents found it by optimizing a score. Read: Two agents on the same model scored 0.79 and 0.55 on the same incidents, so the harness, not the model, made the difference. Retuning against those graded incidents then cut cost per alert by more than 3x. Read: That share was 27% a year ago. Open models cost about a quarter as much per token while closed models lead by about 11 points on an intelligence index, so most routed traffic now trades that quality gap for a 4x lower price.