If you run an app on Phala, today's $PHA news comes with homework.

Phala's October 19 report says attackers read logs and environment variables from some customer apps during October 8–12. It says platform fixes were completed October 15.

Affected customers should rotate secrets stored in the environment variables of the apps named in their notices. All customers have a November 19 deadline to upgrade their confidential VMs. Fixing the platform leaves customer-side cleanup to do.