Hacker News· anurag·· 17 小时前精选AI 评分54
Trigger.dev 披露部分客户环境变量遭未授权访问
Trigger.dev customer environment variables exposed
AI 导读
Trigger.dev 披露，一场安全事件中，攻击者未授权访问了部分组织的环境变量。公司称已阻断此次攻击使用的利用方式，并向所有受影响账户所有者发送了缓解步骤，后续更新将发布在其状态页。
推荐理由
事件披露了部分组织的环境变量遭未授权访问，并给出已阻断利用、通知账户所有者等处置状态，便于受影响方核对暴露范围与缓解措施。
正文 · 原文
There has been a security incident at Trigger.dev.
We've blocked the exploit used in this attack, but our investigation has identified exposure across a subset of organizations.
The attacker gained unauthorized access to environment variables for these organizations.
We have emailed all impacted account owners with steps to mitigate.
We will publish updates on our status page, and you can contact us if you have any questions.
来源：Hacker News · trigger.dev