The workflow automation platform confirmed unauthorized access to customer environment variables, which often store API keys and database credentials, posing widespread account takeover and data breach risks for users.
trigger.dev
The workflow automation platform confirmed unauthorized access to customer environment variables, which often store API keys and database credentials, posing widespread account takeover and data breach risks for users.
The drive, marketed as secure storage for sensitive data, lacks actual encryption, meaning any attacker with physical access can read all stored files immediately.
The move restricts free and low-tier access to xAI's chatbot, signaling a shift toward prioritizing paid usage as inference costs remain a major barrier for AI providers.
The change will consolidate usage caps across OpenAI's consumer and coding products, while a purported Anthropic Mythos model leak on Hugging Face was widely dismissed as fake by the AI community.
Built with Claude Opus 5.5, the tool curates book recommendations from 20 years of HN comments, joining a series of community-built content aggregators inspired by Karpathy's HackerTube.
The tool scrapes and ranks Wikipedia links from HN comments, creating a searchable archive of the platform's most frequently referenced encyclopedia entries.