WORLDTECHNorthflank warns customers to rotate secrets after breach abuses AI API keys
Northflank, a cloud application hosting platform, is telling customers to rotate every credential and secret stored on its service after a security breach led to unauthorized use of their AI API keys. An AI API key is the credential that lets one piece of software call another to access AI services.
Breach exposed customers' AI API keys
Northflank has issued a warning to its customers following a security breach on its platform. According to the report by BleepingComputer, the breach resulted in unauthorized use of customers' AI API keys.
The API keys are the interfaces that allow one piece of software to communicate with another, and in this case they were used by parties who should not have had access to them.
Customers asked to rotate all credentials
Northflank is advising customers to rotate all credentials and secrets stored on the platform. Rotating means replacing existing keys and passwords with new ones, which limits what an attacker can do with credentials they may already hold.
The company's guidance covers the entire set of secrets held on its service, not only the AI API keys that were misused.
Open questions
- How many customers were affected by the unauthorized use of their AI API keys?
- What was the access route used in the security breach?