Railway news
Railway appears in 2 stories we have published between September 2026 and November 2026, mostly in our Technology coverage. It is most often reported alongside Al Jazeera Balkans, Cloudflare and Coinbase.
Latest development
Railway breach steals AI API keys, drives $740,000 in fraudulent charges
Cloud hosting provider Railway disclosed a security breach where attackers exploited a zero-day vulnerability to steal customer AI API keys and cloud credentials. The incident led to $740,000 in fraudulent AI charges over 26 hours, with environment variables from up to 100,000 workspaces potentially exposed. Railway is working with AI providers to refund the charges and will cover unreimbursed losses.
11 November 2026
Covered alongside
Railway breach steals AI API keys, drives $740,000 in fraudulent charges
Attackers exploited a zero-day vulnerability in Railway’s build system, stealing customer AI API keys and cloud credentials to run up $740,000 in fraudulent…
Microsoft disrupts AI-powered phishing tool but censors criticism poorly
Microsoft and partners dismantled EvilTokens, an AI-driven phishing platform, but faced criticism for censoring ‘Microslop’ on Discord. Lessons for founders in security and PR.