/
attack_type:credential_theft × latest_source_host:techcrunch.com × limpar

Resultados

2 casos · pág. 1/1

techcrunch.com · high

OpenCode Console breach exposes AI provider API keys of 1.4% of users, driving unauthorized charges

OpenCode, an open-source AI coding agent, disclosed on Saturday that attackers broke into an older system overnight and affected 1.4% of users of its online platform, OpenCode Console. Some of those users store API keys for AI services there. The company called it a "large-scale distillation attack", but skeptics say it was a straightforw…

technology software development
techcrunch.com · critical

PHP critical flaws, Node.js patches, LiteLLM supply chain compromise and eMudhra CA key compromise land on the same day

A cluster of unrelated but concurrent security events hit on 21 October 2026. Reuters reported government websites worldwide going offline after AI-discovered critical vulnerabilities in PHP, and the NSA advised organizations to update immediately or take PHP systems offline. The same day, Node.js patched four high-severity flaws, and Lit…

government technology