Northflank expands secret rotation after reports of AI key abuse
Northflank enabled Minio and RabbitMQ secret rotation for all customers on October 31. The additions follow reports of unauthorized AI key use during its security investigation.
Spec sheet
- Minio enabled
- 31 Oct, 22:32 UTC
- RabbitMQ enabled
- 31 Oct, 23:31 UTC
- Investigation opened
- 30 October 2026
Separately, Wiz’s October 30 research documented downstream abuse of credentials associated with a compromised vendor. One observed key generated approximately 800,000 Bedrock calls over 30 hours before remediation. Wiz did not identify the vendor behind that example as Northflank. Its broader review found no single vulnerability or dependency connecting the incidents it examined.
Claim check
- Confirmed Northflank has not declared the incident resolved. [1]
Sources
- Security incident · Northflank · 31 Oct
- “Black October” for AI Developer Platforms · Wiz · 30 Oct