#llmjacking

Cloud security firm Wiz says at least nine platforms that developers use to build and host AI apps disclosed security incidents in October, among them Fireworks AI, Lightning AI, OpenCode, Railway, Warp and, on October 30, Northflank. It later added Brev (NVIDIA), Trigger.dev and Chainstack. Wiz says no single vulnerability links them, but every public report describes attackers hunting stored environment variables, especially keys that unlock AI services. Zeabur says it will shut down after its incident.

Wiz traced two stolen enterprise keys: each was first tested with a single call, then flooded with Amazon Bedrock requests, about 2.5 million calls in all and likely over $100,000 in usage at list price, with traffic resembling resold coding-agent use. It links the keys to an LLM-resale operation.

Northflank told customers to assume every environment variable was decrypted and to rotate all secrets; users reported their AI keys being abused. It says the attack vector was contained within an hour, that it patched the Linux flaw CVE-2026-98432 across its fleet, and that a root-cause report will follow.