Thieves pilfer environment variables from Trigger AI workflow tool
So, who's ready to clear the dust out of that server closet and move things back on-prem?
A security incident has exposed environment variables for some customers of the cloud-hosted AI workflow platform Trigger.dev, according to the company's disclosure on Sunday. The attackers gained unauthorized access to these environment variables, which contain sensitive credentials that could allow them to control connected services and digital infrastructure.
Although the exploit has been blocked, affected customers have been advised to take steps to avoid further security issues. Trigger.dev is a platform for building AI agents and workflows in TypeScript, offering features like retries, scaling, and monitoring. The company, which has high-profile customers such as fashion brand Emporio Armani and AI acquisitions platform GovSignals, declined to provide further details on the incident, stating that a full incident report will be released soon.
Written by urgent.news from The Register's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
