The "AI Attack" Headline Is Hiding a Very Boring Credential Leak
This story is from 2026-10-25. It is preserved in the archive; the latest stories are on the live feed.
When a breach gets framed around a trendy new attack class, ask what actually leaked and how. OpenCode, an AI coding agent, disclosed that stored external-provider API keys (Anthropic, OpenAI, Google) were exposed for 1.4% of Console users. The disclosure ties this to a large-scale distillation att…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-25 15:42 · DEV Community — AI
The "AI Attack" Headline Is Hiding a Very Boring Credential Leak