AI · AI today, November 11, 2026
Security
Railway says an attack primarily targeted keys for AI services
· Aster editorial team
AI-generated imageRailway published its final report on an October attack and said AI provider keys were the primary target. The company estimates that the attacker could have decrypted variables from up to 1.85 % of its workspaces and that linked-account tokens for 1,852 users were among the affected data. Railway estimates roughly $740,000 in unauthorized use of stolen keys and says it will cover charges that providers do not refund.
Why it matters
The case shows that AI credentials have become resalable assets and that a breach at a development platform can spread across multiple providers.
For the technical crowd
Railway says it revoked affected tokens, notified the highest-risk users, and found no customer database access. The report places the period of unauthorized access between October 20 and 21.
· Source: Railway
More from AI today
- Tether AI Research introduces BotPsy, a 0.8-billion-parameter local agentTether AI Research introduced BotPsy, a 0.8-billion-parameter model for calling tools and running workflows on a device. It is based on Qwen3.5-0.8B…
- ElevenLabs launches Scribe v3 and a real-time model for speech transcriptionElevenLabs launched Scribe v3 for recorded audio and Scribe v3 Live for low-latency transcription. The real-time version adds speaker diarization and…
- Google DeepMind introduces Gemini Robotics 2.5 for a broader range of physical tasksGoogle DeepMind introduced Gemini Robotics 2.5, a vision-language-action model that is rolling out to its robotics partners. The company evaluated it…
- The Linux Foundation adopts a verifiable identity standard for AI agentsThe Linux Foundation welcomed Agent Name Service as an open project for naming, verifying, and discovering AI agents through existing DNS and…
- Researchers link an AI agent to the theft of Tajik government documentsSecurity firm CloudSek told Reuters that a group linked to Kazakhstan used the open-source Hermes framework to steal more than 2,000 documents…