I think we’ll see a lot more of this. The attackers were going after the AI keys stored on Railway, because an API key is basically a credit card for compute now. Every company running agents is sitting on a pile of these keys! here’s the 10 minute fix. rotate every key tonight, set a hard monthly spend limit in each AI dashboard, give every agent its own key, and turn on usage alerts so you know the second something spikes. someone should build the tool that finds every AI key a company…

Andrew Curran@AndrewCurran_3d ago

Railway has been hacked.