Northflank has opened secret rotation for MySQL and Redis to all users. Secret rotation means replacing passwords and access keys. The company announced the change in a security update posted at 13:34 UTC on October 31.
The cloud service runs apps and databases for developers. It had opened the same tools for Postgres and MongoDB on October 30.
Northflank still says users should assume all stored environment variables were exposed. These app settings can hold passwords and API keys. Those keys let an app use another service.
It also opened audit logs to all users, free accounts included, at 01:04 UTC on October 31. The log guide says those records can show who made a change, when it happened and what changed.
The firm asks users to check the usage and bills for their AI services as well. It says users have reported AI keys being used without permission.
Its advice covers every secret saved in Northflank, including those shared between apps. It tells users to revoke old credentials with the firms that issued them, get new ones and update their apps. It also tells users to switch off public access to database add-ons where they had turned it on.
Northflank links to an October 30 report by security firm Wiz. It lists at least nine developer platforms with security incidents that month. Wiz says no single flaw or shared piece of software links the attacks.
The incident is still marked Identified. The notice gives no cause or count of users affected. How much of the stored data was read remains unclear.