Trigger.dev versions prior to 4.6.0 contain a high-severity authorization flaw that allows attackers to steal root API keys and admin tokens using limited credentials.
Drone strikes on three facilities forced Yandex to disable services, urging customers to activate disaster recovery plans for cloud storage and compute.
