Northflank breach adds to a month of attacks on AI developer platforms
- Vendor
- Northflank
Developer platform Northflank disclosed a security incident on Oct 30 and told customers to assume all environment variables were decrypted and rotate every secret. Users have reported that their AI keys were used. Wiz counts Northflank as the ninth AI developer platform to disclose an incident in October, and says every public report describes attackers hunting stored environment variables, especially AI keys.
Northflank says a Wiz threat alert reached it at 7:43 a.m. ET on Oct 30. It deployed a first network policy patch at 8:02 a.m. ET and more by 9:05 a.m. It hasn’t said how the attacker got in, and its investigation is ongoing. It has since made secret rotation available for its add-ons, and turned on audit logs for all customers, including free users.
Wiz lists the nine platforms as Fireworks AI, Andromeda, Zeabur, Lightning AI, OpenCode, Railway, Warp, CommandCode and Northflank. Fireworks, Zeabur and Lightning AI trace their incidents to credential access. Railway believes the attacker got in through privilege escalation in its build systems, and Warp suggests a third-party dependency. Wiz found no single flaw or dependency linking them.
Wiz saw two enterprise keys stolen in one of these breaches abused on Bedrock. Both were first tested within 30 minutes of the reported credential theft. One was then used for about 800,000 calls in 30 hours, the other for about 1.7 million in 13 hours. Wiz estimates over $100,000 in use at list price, in traffic that resembles resold coding-agent use.
Wiz linked the keys to two sites reselling cheap access to AI models, which tested them, but couldn’t tie the resellers to the breaches or the heavy use. It lists four addresses that tested stolen keys, which it suspects are linked to resale, but has no evidence tying them directly to the platform attacks.
At 7:38 p.m. ET on Oct 30, Northflank said the reports of unauthorized AI key use may fit the wider pattern of attacks on AI credentials. It pointed to similar addresses in Wiz’s report.
- Vendor
- Northflank
What to do
6 steps
Indicators
IPs copy defanged. Use Copy raw for queries.
| Type | Value | Note |
|---|---|---|
| IP address | Named by Zeabur, later used to check stolen keys, Wiz says | |
| IP address | Checked permissions on several stolen keys, Wiz says | |
| IP address | Checked permissions on several stolen keys, Wiz says | |
| IP address | Used multiple stolen keys, Wiz says |
- IP addressNamed by Zeabur, later used to check stolen keys, Wiz says
- IP addressChecked permissions on several stolen keys, Wiz says
- IP addressChecked permissions on several stolen keys, Wiz says
- IP addressUsed multiple stolen keys, Wiz says
Timeline
- Oct 30Northflank discloses the incident and tells customers to rotate every secret.
- Oct 30Wiz publishes its report on attacks against nine AI developer platforms.
- Oct 31Northflank makes secret rotation available for its MySQL, Redis, Minio and RabbitMQ add-ons.
Sources
- Northflank noticePrimary source status.northflank.com
- Wiz researchPrimary source wiz.io
- Cloud Security Alliance researchPrimary source labs.cloudsecurityalliance.org