October 11, 2026
- Fireworks AI confirmed an unauthorized third party used internal Fireworks credentials to access environment variables in evaluation jobs across a limited number of customer accounts. API keys and tokens stored as secrets are believed captured; activity was identified 6 October, containment began the same day, and affected customers have been directly notified. Fireworks AI bulletin · Cloud & Identity
in Microsoft's 17 Trillion-Row Analytics Service Fell to One Unchecked JWT