/
vendors:OpenCode × victim_sectors:"software development" × limpar

Resultados

3 casos · pág. 1/1

bleepingcomputer.com · high

OpenCode breach exposes users' linked AI provider API keys during large-scale distillation attack, causing unauthorized charges

The open-source AI coding agent OpenCode disclosed a breach tied to a "large-scale distillation attack" that exposed stored external-provider API keys for 1.4% of OpenCode Console users. Affected users had linked providers such as Anthropic, OpenAI and Google. Users reported unauthorized charges ranging from several hundred USD to more th…

techcrunch.com · high

OpenCode Console breach exposes AI provider API keys of 1.4% of users, driving unauthorized charges

OpenCode, an open-source AI coding agent, disclosed on Saturday that attackers broke into an older system overnight and affected 1.4% of users of its online platform, OpenCode Console. Some of those users store API keys for AI services there. The company called it a "large-scale distillation attack", but skeptics say it was a straightforw…

infosecurity-magazine.com · high

OpenCode Console breach via legacy system may expose OpenAI, Anthropic and Google API keys

OpenCode, the open-source AI agent framework developed by Anomaly, confirmed on October 17 a security breach that occurred the night before and affected its Console service. Console stores each workspace's third-party AI provider credentials centrally. About 1.4% of Console users, those with external providers linked, may have had OpenAI,…