Northflank Tells Users to Rotate All Secrets After a Breach

Northflank told customers Friday to replace every secret stored on its platform after a security breach, and some customers’ AI API keys were used without authorization. Users were told to treat all environment variables as if they had been decrypted. Applications read these settings while running, and they commonly hold database passwords, cloud credentials and API keys. Northflank’s instructions call for revoking old credentials with their issuers, generating replacements and updating them in workloads, secret groups and global secrets.

Source: TokenPost