Railway: attackers decrypted env vars for at most 1.85% of workspaces, around 100,000. That's the upper bound. Deploy there? Rotate every secret, AI provider keys first. Those are what they hunted. The $740,000 bill says they found some.

@cve_today Rotation is the cleanup. The part I'd do today is a hard spend cap and a usage alert on every AI provider key that lives in env vars. Railway says it'll cover what providers won't refund. Your next host might not.