UK — The Register

Thieves pilfer environment variables from Trigger AI workflow tool

SecurityNovember 3, 20261 min read

A hacker broke into some customer data at Trigger.dev, an AI workflow platform. The stolen data may include environment variables, which can hold secret passwords and keys.

What happened

Trigger.dev said on Sunday that it had a security incident. An attacker got into environment variables for some customers. The company said the way the attacker got in has been blocked. Customers affected have been told what steps to take. Trigger has not said which companies were hit, and it gave few other details.

What is Trigger.dev?

Trigger.dev is a tool that helps developers build AI agents and workflows. Its main promise is that long jobs keep running even when there are crashes, retries, or new software releases. It also helps teams watch what their AI tasks are doing. Its customers include well-known names such as Emporio Armani and Cal.com.

Key facts

The incident was disclosed on Sunday.
The company said the problem affected a subset of organizations, which means some, not all, customers.
Trigger recently added webhooks that work with services like Stripe, Supabase, and Slack.
Trigger is open source and can be self-hosted.

Why it matters

Environment variables often hold secret keys that let programs log in to other services. If a hacker gets these keys, they could reach a customer's other systems. Because Trigger keeps AI tasks running automatically, stolen keys could cause more harm over time. Affected customers should change their secrets right away.

What to watch

Whether Trigger publishes a full incident report with more details.
Which organizations were affected.
What steps Trigger tells customers to take to protect their data.

Glossary

environment variables: Hidden settings in a program, often holding secret passwords or keys that let the program use other services.
Trigger.dev: A platform that helps developers build AI agents and workflows that keep running even after crashes or updates.
open source: Software whose code is public, so anyone can read it, change it, and run it on their own computers.
self-hosted: Run on your own servers instead of on a company's cloud service.

Token thieves costing companies $100K+ per day in illicit LLM charges

Criminals are hijacking corporate LLM access to run up unauthorized token charges that can exceed $100,000 a day, according to a Google Mandiant report. Some organizations saw cumulative charges reach $1 million before revoking intruders' access. The report describes this "LLMJacking" tactic as steadily increasing over the past two years, with attackers also using stolen third-party API keys and specialized roles for access and monetization.

SecurityITmediaNov 2

GMO press conference repeats "hourglass of life"; Internet users pile on criticism of CEO Kumagai's remarks

GMO Internet Group held a press conference on November 2 over unauthorized access to its "Onamae.com Desktop Cloud" VPS used for FX automated trading. CEO Masatoshi Kumagai repeatedly used the phrase "hourglass of life," which trended on X, while many users criticized the rambling remarks, including his discussion of AI, as hard to follow. Kumagai apologized for his recent X posts, said he would suspend his X account for a period after summarizing the conference, and did not clearly deny resigning.

SecurityThe RegisterNov 2

Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps

Cyberattacks on Russia's and Ukraine's emergency alert apps on Sunday evening sent fake messages about missile and nuclear strikes to the public, with officials from both countries confirming the incidents. Ukraine's Air Force quickly said there was no radiation threat, while Russia's Ministry of Emergency Situations said its app was restored about 90 minutes after an update. Russia has not explicitly blamed Ukraine for the attack, and Ukraine's Oleksander Merezhko described it as part of cyber war.