/
vendors:OpenCode × victim_sectors:technology × limpar

Resultados

5 casos · pág. 1/1

thehackernews.com · high

OpenCode Console legacy system breach may have exposed saved OpenAI, Anthropic and Google API keys of 1.4% of users

An intruder reached a legacy system at OpenCode on the night of October 16, and the company says third-party AI provider keys saved in OpenCode Console "may have been exposed." About 1.4% of Console users, all with an outside provider linked, were notified by email on October 17 and told to revoke and replace their OpenAI, Anthropic or Go…

gbhackers.com · medium

OpenCode discloses breach affecting 1.4% of Console users, attributed to a 'large-scale distillation attack'

OpenCode disclosed on X on October 17 a security breach affecting 1.4% of its Console users, which it attributes to a "large-scale distillation attack". The affected accounts belong to users who had connected external providers. The company emailed affected users the following morning and says anyone who did not receive a notice was not i…

bleepingcomputer.com · high

OpenCode breach exposes users' linked AI provider API keys during large-scale distillation attack, causing unauthorized charges

The open-source AI coding agent OpenCode disclosed a breach tied to a "large-scale distillation attack" that exposed stored external-provider API keys for 1.4% of OpenCode Console users. Affected users had linked providers such as Anthropic, OpenAI and Google. Users reported unauthorized charges ranging from several hundred USD to more th…

techcrunch.com · high

OpenCode Console breach exposes AI provider API keys of 1.4% of users, driving unauthorized charges

OpenCode, an open-source AI coding agent, disclosed on Saturday that attackers broke into an older system overnight and affected 1.4% of users of its online platform, OpenCode Console. Some of those users store API keys for AI services there. The company called it a "large-scale distillation attack", but skeptics say it was a straightforw…

infosecurity-magazine.com · high

OpenCode Console breach via legacy system may expose OpenAI, Anthropic and Google API keys

OpenCode, the open-source AI agent framework developed by Anomaly, confirmed on October 17 a security breach that occurred the night before and affected its Console service. Console stores each workspace's third-party AI provider credentials centrally. About 1.4% of Console users, those with external providers linked, may have had OpenAI,…