Rotate third-party keys you stored on an AI platform
Fireworks AI said an attacker used internal Fireworks credentials to read environment variables in some customers' evaluation jobs, capturing API keys and tokens stored as secrets. It revoked affected Fireworks keys, but third-party keys have to be rotated with the provider that issued them.