/
attack_type:credential_theft × latest_source_host:bleepingcomputer.com × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · critical

Zeabur breached twice in two months via leaked plaintext credentials; 321,810 accounts exposed, platform shutting down

Zeabur, a developer hosting and deployment platform, disclosed that on October 14-15, 2026 an attacker used leaked internal credentials stored in plaintext to compromise its shared clusters, some Dedicated Servers and internal systems, and ultimately read the production database. The breach affected shared clusters in nine regions, 321,81…

bleepingcomputer.com · high

OpenCode breach exposes users' linked AI provider API keys during large-scale distillation attack, causing unauthorized charges

The open-source AI coding agent OpenCode disclosed a breach tied to a "large-scale distillation attack" that exposed stored external-provider API keys for 1.4% of OpenCode Console users. Affected users had linked providers such as Anthropic, OpenAI and Google. Users reported unauthorized charges ranging from several hundred USD to more th…