// Oct 21 to Oct 22, 2026 Railway's servers were compromised, and every customer is rotating keys A hosting platform tells every customer to rotate their keys. A small AI video app finds out what free credits attract. And two indie sites learn that a lot of their "crawler" traffic is either fake... 4 stories Read the 2026-10-22 issue ↗

// Oct 20 to Oct 21, 2026 PingCAP confirms a breach, and the attacker's report says the keys were in the repo A database vendor confirms someone was inside its internal systems, and the attackers say the keys were sitting in PingCAP's own repos. Two small sites check their logs and find the crawlers... 3 stories Read the 2026-10-21 issue ↗

// Oct 19 to Oct 20, 2026 Zeabur: plaintext admin credentials, public admin panels, second incident since August A hosting platform admits its admin credentials sat in plaintext, a solo dev learns his cache mostly serves AI crawlers, and a founder finds a trial abuser who schedules signups like a backup job.... 4 stories Read the 2026-10-20 issue ↗