OpenCode breach exposed AI API keys of 1.4% of Console users
thione · x · 2026-10-26
OpenCode disclosed a breach affecting 1.4% of its Console users, exposing their AI API keys. The company attributed it to a "distillation attack," but that claim remains disputed.
The post also notes DeepSeek faced a DHS order to remove its products and third-party derivatives from U.S. civilian agency systems, along with a procurement ban.
More from Safety
- Security tip: use AI agents to build a NIST CSF knowledge base for incident response — prasanna_says · 2026-10-26
- Fangcun AI, China's first independent frontier AI safety lab, launches with DeepSeek eval report — JacquesThibs · 2026-10-26
- ESR on the Bugpocalypse: locking down frontier models only hands the game to Chinese open weights — colinmcnamara · 2026-10-26
- DHS orders DeepSeek products removed from US civilian agency systems — thione · 2026-10-26
- One hacker breached 100+ company websites using AI, scope unknown — thione · 2026-10-26
- METR red-teams OpenAI's agent monitoring, finds bypasses and gaps — thione · 2026-10-26