OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys
OpenCode reported that an intruder accessed a legacy system on the night of October 16, potentially exposing API keys for third‑party AI providers that users had stored in the OpenCode Console. The Console service allows workspaces to save OpenAI, Anthropic or Google keys, which are then used to call the providers so team members can use the models without separate authentication.
Exposed API keys could be abused to incur costs or leak data, posing a serious security risk.
Research angleHow does an organization’s API‑key management policy affect employees’ security compliance intentions? — Protection Motivation Theory
Turn this security issue into a research project
HJITM works with researchers from study design through surveys, analysis and submission to international journals in generative AI and technology management. Bring us your research question.
This item is an AI-generated summary of reporting by The Hacker News. Please check the original article for accuracy. Copyright in the original article belongs to The Hacker News.