Attackers are exploiting a Rails Active Storage flaw that can render server secrets as pixels and expose the keys needed for deeper compromise.