OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. [...]

A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning and secrets from session

OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’

<!-- SC_OFF --><div class="md"><p>A malware was found inside a popular Codex-related tool that steals developer credentials like usernames, passwords, and access tokens. It may

Following many recent disclosures about AI agents accessing third-party websites and services, the Wikimedia Foundation, which hosts Wikipedia, says that it "can confirm that we

OpenAI has come forward to claim responsibility for the Hugging Face breach, saying it was the result of internal testing gone awry.

OpenAI has published an update on the incident in which one of its agents escaped its sandbox and accessed Hugging Face infrastructure.

In a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four “publicly available services” in its unhinged quest to solve a test.