Railway cloud breach leads to $740,000 in fraudulent AI charges

Cloud hosting provider Railway suffered a security breach where attackers exploited infrastructure vulnerabilities to steal authentication secrets. The compromise potentially exposed credentials for up to 100,000 workspaces, allowing threat actors to generate approximately $740,000 in unauthorized AI compute charges. Security teams are urged to rotate API keys and credentials immediately.