Evidence · DiggingBeagle record
Phala November 2026 preliminary confidential-computing incident report
Primary or origin disclosure used to qualify the underlying mechanism, stated prerequisites and limits. Legacy internet service reached loopback-trusting management path, created illicit CVMs on two hosts; KMS/application keys potentially exposed. Unhardened production GPU inference VM with DeepSeek V4 Flash 0731 OpenRouter traffic controlled; external synthetic canary credentials in sampled prompts Oct21-22 later used by attacker. Server containment Nov8, KMS rotated Nov6; misuse of already stolen secrets continued Nov9.
- Source role
- primary disclosure
Evidence record
Primary or origin disclosure used to qualify the underlying mechanism, stated prerequisites and limits. Legacy internet service reached loopback-trusting management path, created illicit CVMs on two hosts; KMS/application keys potentially exposed. Unhardened production GPU inference VM with DeepSeek V4 Flash 0731 OpenRouter traffic controlled; external synthetic canary credentials in sampled prompts Oct21-22 later used by attacker. Server containment Nov8, KMS rotated Nov6; misuse of already stolen secrets continued Nov9.
Claim-level citations (3)
- supportsPhala incident combined unauthorized CVMs and evidence of sampled inference-secret misuse: Phala reports that canary credentials embedded by an external researcher were misused only for requests sent on October 21 and 22, despite probes before and after; this does not establish continuous interception of every inference prompt.
Phala preliminary incident report, Canary credentials, attack chronology and containment
- supportsPhala incident combined unauthorized CVMs and evidence of sampled inference-secret misuse: The first-party report does not establish a TEE cryptographic break, a complete prompt-theft count, a common entry point for both affected surfaces or a known attacker identity. November 9 misuse of an already exposed credential is not necessarily renewed server access.
Preliminary report, legacy service and CVM access, inference VM, canary sequence and remediation
- supportsPhala incident combined unauthorized CVMs and evidence of sampled inference-secret misuse: Phala's preliminary incident report describes access through an internet-reachable legacy service into a loopback-trusting management path, allowing unauthorized confidential virtual machines on two hosts. The investigation separately addresses an underhardened GPU inference environment.
Preliminary report, legacy service and CVM access, inference VM, canary sequence and remediation