Tech News
← Home  ·  All topics

Railway

11 GoKawiil briefs on this topic

Railway confirms breach exposed secrets for up to 100,000 workspaces, $740K in AI fraud

Railway disclosed that attackers exploited an unknown vulnerability in its build infrastructure on October 20 to escape filesystem isolation and steal an internal credential, later using a second flaw in a misconfigured trust relationship to access decrypted customer environment variables. The company says the breach may have exposed credentials for as many as 100,000 workspaces, about 1.85% of its total, and resulted in roughly $740,000 in fraudulent AI usage charges before engineers contained the intrusion after a 26-hour standoff.

Railway urges all users to rotate secrets after suspected breach

Cloud hosting provider Railway detected suspicious activity on systems storing customer environment variables and said an unauthorized third party may have accessed encrypted variables, obtaining decrypted contents in some cases. Railway linked the incident to a broader series of attacks on AI inference providers, who were notified and told to revoke their keys, and it paused deployments platform-wide during its investigation.

Railway tells all users to rotate API keys after breach exposes secrets

Railway, a cloud development platform, disclosed that attackers accessed encrypted environment variables and, in some cases, obtained their decrypted contents. The company said its initial analysis points to a subset of affected users but is urging all customers to revoke and rotate their keys, and has paused customer deployments while it investigates.

Railway discloses breach exposing customer environment variables

Railway said it detected unauthorized access to systems storing customer environment variables, with an intruder possibly viewing decrypted secrets such as API keys and database credentials for some accounts. The company has paused all deployments during its investigation and is urging all users to rotate environment variables and registry credentials as a precaution, even though it believes impact may be limited to a subset of accounts.

Illinois Railway Museum explains articulated bus engineering at annual Bus Day

The Illinois Railway Museum's 11th annual Bus Day featured 13 operable buses, including King County Metro No. 4020, a 1987 MAN SG-T310 articulated trolley bus. The event highlighted how the museum's pivot-jointed 'bendy buses' function, prompting visitor questions about the mechanics behind their two-section, hinged design.

Guangzhou South Railway Station handles 1 million riders in a single day

During China's National Day Golden Week, Guangzhou South Railway Station served over one million passengers in 24 hours, a reported world record, according to South China Morning Post. The station ran 1,252 trains that day with headways as low as 40 seconds, while China's national rail network logged 25.2 million passenger trips on October 1 alone.

Blog post criticizes AI-generated 'personalized' recruiter emails as hollow

A software engineer's blog post describes a new pattern of recruiter outreach emails that open with an LLM-generated paragraph praising the recipient's specific career history, then pivot to a job description that has little relation to that history. The author gives several examples where the personalized intro and the role description don't logically connect, arguing the entire email, not just the flattery, appears machine-written.

BTP's £320,000 facial recognition trial nets zero arrests from half a million scans

British Transport Police ran a six-month live facial recognition trial at London railway stations, scanning over 500,000 faces at a cost exceeding £320,000. The single alert generated during the trial turned out to be a false positive, with no arrests resulting directly from the technology. Despite this, BTP extended the pilot through November and expanded it to some London Underground stations, where three subsequent alerts confirmed people were complying with court-imposed conditions.

Researchers redate earliest known space weather railway disruption in Exeter

A team led by Jim Wild of Lancaster University, publishing in Space Weather, re-examined an 1871 Nature report describing a magnetic disturbance that delayed trains in Exeter, England, previously dated to 1841. The researchers concluded that date was likely a transcription error, and the actual rail disruption occurred years later, meaning the Carrington Event of 1859 need not be displaced as the earliest documented case of severe geomagnetic interference with British rail signaling.

Ransomware hits Keio Corporation, disrupts hotel payment systems in Japan

Keio Corporation, a Japanese railway and hotel operator, confirmed a ransomware attack detected early Saturday that disrupted business systems, primarily affecting its hospitality division. The company shut down its network, reported the incident to police, and is investigating with external experts whether customer or partner data was accessed. Local media say the attack disrupted payment systems, while train operations appear unaffected.

AI adoption succeeds when it removes repetitive tasks, not when it adds tools

A commentary piece argues that companies scaling successfully with AI focus on cutting out repetitive, friction-heavy work rather than layering on more software or hiring more staff. It uses the redesign of the London Underground map—which ditched geographic accuracy for clarity of purpose—as an analogy for how businesses should simplify processes instead of overcomplicating them with new tools.