The Hacker NewsFactualityFactuality is a Premium featureUnratedUnratedBias analysis in progress

AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platform-as-a-service provider said yesterday. It has promised to pay those charges itself when an AI provider will not refund them. The company builds and runs apps for its customers and stores their secrets, such as API keys and database

15 hours ago · thehackernews.com

BitcoinFactualityFactuality is a Premium featureUnratedUnratedBias analysis in progress

Near AI disclosed a security breach that exposed account information belonging to approximately 100 users and compromised data from 18 legacy artificial intelligence (AI) agents. The Nov. 8, 2026, intrusion exploited a vulnerability in an open-source inference engine, potentially exposing confidential AI requests. SGLang Vulnerability Opens Door to Near AI Infrastructure According to Near AI’s […]

Yesterday · news.bitcoin.com · You are reading this one

BleepingComputerFactualityFactuality is a Premium featureCenterCenterBased on the outlet's overall lean; article framing check pending

Cloud hosting provider Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and generate approximately $740,000 in fraudulent AI usage, potentially exposing credentials for up to 100,000 workspaces. [...]

Yesterday · bleepingcomputer.com

DecryptFactualityFactuality is a Premium featureUnratedUnratedBias analysis in progress

An SGLang flaw let an attacker reach internal systems and potentially view confidential AI requests, exposing the limits of hardware-backed privacy protections.

Yesterday · decrypt.co

The Hacker NewsFactualityFactuality is a Premium featureUnratedUnratedBias analysis in progress

An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, the company said earlier this week. That mode processes requests inside a trusted execution environment (TEE

Yesterday · thehackernews.com

The Hacker NewsFactualityFactuality is a Premium featureUnratedUnratedBias analysis in progress

Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity, affecting account and billing information, alongside secrets, datasets, and incomplete models for a "limited set of accounts." In a notice published on October 10, 2026, the company said it detected unauthorized use of internal Fireworks

Yesterday · thehackernews.com

The BlockFactualityFactuality is a Premium featureUnratedUnratedBias analysis in progress

NEAR AI explained that it found no indication that stored Private Chat conversations or uploaded files were accessed.

2 days ago · theblock.co