As cited
Copy frozen at (site build).
cloud saas
Thieves pilfer environment variables from Trigger AI workflow tool
Trigger.dev, a cloud-hosted platform for building artificial intelligence (AI) agents and workflows, disclosed a security incident in which attackers gained unauthorized access to environment variables belonging to a subset of customers. The compromised environment variables may have contained sensitive credentials that could grant access to connected services and integrations like Stripe, Supabase, and Slack. Trigger has blocked the exploit and notified affected customers but has not publicly identified which organizations were impacted.
Why it matters: Customers of Trigger.dev who store application programming interface (API) keys or other credentials in environment variables face immediate risk of unauthorized access to downstream services, data exfiltration, or workflow disruption if their credentials were exposed; review and rotate all secrets stored on the platform immediately.
- Source published
- First seen by Cybersecurity Tracker