UpdateUTC
Our investigation is ongoing. We have no further confirmed findings to share at this time.
UpdateUTC
Secret rotation on Postgres and MongoDB has been enabled for all users. We recommend disabling public expose on addons if you have enabled that.
All users should assume their environment variables are decrypted and begin rotation immediately.
Secret groups
Global secrets
Multiple users are confirming that their AI keys have been used.
IdentifiedUTC
Assume all environment variables have been decrypted. Disable/rotate all keys.
InvestigatingUTC
Rotate environment variables immediately.
11:43 UTC: Wiz threat alert
11:44 UTC: Northflank engineers review the alert
12:02 UTC: Initial network policy patch
13:00 UTC: Wiz CIRT support requested
13:05 UTC: Additional patching deployed
13:05 UTC: Additional patching deployed