A security breach at Railway exposed sensitive customer secrets, with a cryptocurrency theft transaction detected at least two hours before the incident was officially disclosed. The breach allowed an unauthorized third party to potentially access encrypted environment variables, affecting a subset of users.
source & further reading
osintsights.com — original article
LiteLLM Exposes GitHub Token Leak Behind Malicious Package Release
Threat Actor Wields AI in Multiform Cybercrime Spree
Microsoft Links ConnectWise Breach to China-Aligned Threat Group