🚨 Dual cyber hits Oct 21 2026
• Critical PHP RCE flaws (PHP2Shell) – websites offline worldwide, AI-found, patch ASAP.
• Railway: possible access to decrypted env vars/API keys. Rotate all secrets, builds paused.
#CyberSecurity #PHP #Railway
#railway teve um puta vazamento de dados e agora vou ter que sair revogando chave de API
#railway #CyberSecurity #cyberleak #Cyberattack #Hacking #hack @Railway
📢 SHAME - Hacks happen, but this is on another level. Unprecedented.
If you're on @Railway too: create new keys now, keep the old ones on until deploys come back, then redeploy and revoke. And check what can still reach your database from the internet.
#Railway #infosec #cybersecurity #AIagents #buildinpublic
Hot take: the scariest part of the Railway incident isn't the breach.
It's being told to rotate every secret while builds are paused, so you can't redeploy to use the new ones.
Your uptime is someone else's uptime. Turns out your secrets are too. #Railway
Se les salió de los Rieles 🤯
#Railway
An urgent notice from the Railway team
blog.railway.com/p/security-…
🚨‼️ MAJOR #Railway Security Breach.
Revoke your API keys immediately.
Noticed multiple pings across all of my active api keys early this morning. Ran background security checks, turns out its absolutley true.
They hit me with a functionality test of the api keys too.
Railway says customer environment variables may have been accessed, some decrypted. Rotate every key you stored there at the provider itself, check billing, review logs. Updates: status.railway.com #Railway
Experiencing fall foliage is best done in person. From the East Coast to the West Coast, #FallFoliage #Railway provides unique, stunning autumn scenery. Sit back, relax, and take in #America 's majestic beauty during the holiday season. shorturl.at/TGNwG #Travel
ALT Experiencing fall foliage is best done in person. From the East Coast to the West Coast, scenic train rides provide unique tours that highlight the stunning autumn scenery. Sit back, relax, and appreciate the majestic beauty of America during the holiday season.
Deploy on Railway? Rotate your secrets now.
Railway says an attacker may have accessed customer environment variables and decrypted some. It recommends rolling every env var, API key and registry credential, and checking logs. Deploys are paused.
#Railway #Security
An urgent notice from the Railway team
blog.railway.com/p/security-…
Railway reports possible exposure of customer secrets and urges users to rotate credentials and review service logs.
Our advisory covers the reported scope and recommended response.
ahcts.co/threat-advisory-rai…
#CyberSecurity #Railway #CloudSecurity #databreaches
⚠️ #Railway may have been hacked. Stay alert and change all your API keys and credentials immediately to keep your accounts secure. Don’t wait!
An urgent notice from the Railway team
blog.railway.com/p/security-…
On Railway? Rotate your secrets.
@Railway security incident:
- roll all env vars: API, DB, registry creds
- check service logs
- watch API bills
- deploys paused; can't redeploy yet
- Railway rotating bucket creds
Rotated yet?
#Railway #InfoSec #DevOps #APIKeys
An urgent notice from the Railway team
blog.railway.com/p/security-…