PHA · 2026-11-10 22:10 UTC

Phala November Preliminary Incident Report

Phala published preliminary findings on a security incident affecting its infrastructure, with two groups advised to act: users whose DeepSeek V4 Flash 0731 requests were routed to Phala by OpenRouter, and owners of affected confidential virtual machines. Request contents sent between October 21, 2026 00:00 UTC and November 8, 2026 05:35 UTC should be treated as exposed, and users are told to rotate any secrets included in those requests. The attacker obtained application credentials; Phala contained the incident on November 8, rotated its KMS root key on November 6, and reports no…

Loading the story on Tree News…