Railway warns devs to rotate secrets after potential breach

BleepingComputer security roundup covering suspected cloud-secret exposure at Railway, a Capcom breach affecting 11.7 million accounts, compromise of the LiteLLM release pipeline, actively exploited VeloCloud Orchestrator and Plex vulnerabilities, critical PHP2Shell and GitLab code-execution flaws, malware campaigns, and major law-enforcement disruption activity. The most urgent items involve active exploitation, supply-chain compromise, credential or secret theft, and critical remote code execution.