The Circuitry
THE CIRCUITRYYour one-stop source for all tech news
HOMETODAYNEWSFEEDEVENTS
BOOKMARKS
RSS
© 2026 The Circuitry
About UsSourcesContactCorrectionsPrivacy
  • Today
  • Feed
  • Events
  • Saved
  • AAPL
  • MSFT
  • GOOGL
  • META
  • NVDA
  • TSLA
  • AMZN
  • INTC
  • SONY
  • TTWO
  • COIN
  • BTC
  • ETH
  • SOL
  • AAPL
  • MSFT
  • GOOGL
  • META
  • NVDA
  • TSLA
  • AMZN
  • INTC
  • SONY
  • TTWO
  • COIN
  • BTC
  • ETH
  • SOL

Feed

Ad
From The CircuitryVerified tech news, cross-checked.How we verify →
  • DoorDash agrees to acquire Instacart for about $17 billionTech
  • Intel shares plunge after hours as Israel fab blast and PC slowdown weigh on outlookTech
  • Amazon earnings call: AWS backlog reaches $578 billion, 2027 spending to rise "meaningfully"Tech
  • Rivian R2 becomes company’s top-selling vehicle in Q3Tech
  • Reddit to require login for all users, starting with tests outside USTech
  • CISA Adds Exploited Cisco ASA and FTD VPN Crash Flaw CVE-2026-76418 to KEVSecurity
  • CISA Adds Critical GitLab CI/CD Regex Flaw CVE-2026-97229 to Exploited Vulnerabilities ListSecurity
  • Intel Q3 2026 earnings: $16.5 billion revenue, data center up 78%Tech
Scroll for more
Verification
VERIFIEDConfidence: HIGH
Source identified
Claims cross-referenced
No discrepancies found
Sourcing
1source

via bleepingcomputer.com

bleepingcomputer.com · track record
2Stories
100%Verified
230d
All sources →
Ad
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
Home/Security/OpenCode Console breach may have exposed users' AI provider API keys
VERIFIEDBy Xavier Rivera·Monday, October 19, 2026 at 7:33 PM AST·1.5 min read

OpenCode Console breach may have exposed users' AI provider API keys

OpenCode says a breach tied to a large-scale distillation attack affected 1.4% of OpenCode Console users who had linked external providers. Earliest possible key exposure was October 17 at 00:30 UTC, and some users report unauthorized API charges of up to $1,700.

Source:bleepingcomputer.com
Post
OpenCode Console breach may have exposed users' AI provider API keys
Ad
From The CircuitryVerified tech news, cross-checked.How we verify →
Ad
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
TL;DRAI · 60 sec read

OpenCode says a breach of a legacy Console system may have exposed the OpenAI, Anthropic or Google API keys saved by 1.4% of Console users. Affected users were told to revoke and replace those keys, and some report unauthorized charges.

Morning Brief

Get the daily tech brief

Every morning, in your inbox. What's in The Brief →

OpenCode, the open-source AI coding agent, says a breach of its Console service may have exposed API keys that some users saved for external AI providers.

1.4% of OpenCode Console users were affected.
"We had a security breach last night related to a large-scale distillation attack that impacted 1.4% of OpenCode Console users," the project said on Saturday, October 17. "We have notified them all this morning via email. If you did not get an email, you were not impacted, it was a subset of users who had external providers linked." Those providers include OpenAI, Anthropic and Google.

The breach involved Console, not the local app.
Co-founder Dax Raad said the incident involved "the OpenCode Console, not OpenCode itself," according to The Hacker News. Keys added in the OpenCode command-line and desktop apps are stored on the user's machine. OpenCode's email said the earliest possible exposure was October 17, 2026, at 00:30 UTC, and told users to revoke and replace affected keys with each provider.
From The CircuitryThe Feed — live briefs across tech, all day.See what’s happening →

Some users report unauthorized charges.
Users reported charges ranging from several hundred dollars to as much as $1,700, BleepingComputer reported, and some said Google suspended their cloud projects over activity consistent with hijacked resources. OpenCode's message to affected users mentioned possible reimbursement.

OpenCode is working with OpenAI, Anthropic and Google.
Ad
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
Raad said attackers had been targeting OpenCode's systems for at least 48 hours using AI agents. OpenCode has not said how the legacy system was reached.
Why this mattersAI · ~100 words

Tap a lens to see what this story means for you.

Morning Brief

Liked this? The Brief brings you the whole day in tech, verified, every morning.

Two minutes, free forever. What's in The Brief →

Reader-supported
DonateBuy me a coffee →Follow@thecircuitry_ →Follow@thecircuitry.to →
HELP US IMPROVE
From The Circuitry

See what’s happening right now

The Feed runs all day — short, verified briefs the moment they break.

Open the Feed →
From The Circuitry

Follow @thecircuitry_

Every story we publish, as it happens. No noise between.

Follow on X ↗On Bluesky ↗

Reader-supported

The Circuitry is a passion project I've always wanted to build, and I love the work behind it.

Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.

Any contribution is appreciated. If not, no pressure. Thanks for reading.

Buy me a coffee
More frombleepingcomputer.com
  • Researchers say hackers hijacked AOMEI update servers to spread malware

    Tech · 10d
More inTech
  • CISA Adds Exploited Cisco ASA and FTD VPN Crash Flaw CVE-2026-76418 to KEV

    Tech · 14h
  • CISA Adds Critical GitLab CI/CD Regex Flaw CVE-2026-97229 to Exploited Vulnerabilities List

    Tech · 14h
  • Intel Q3 2026 earnings: $16.5 billion revenue, data center up 78%

    Tech · 14h
SupportThe Work

The Circuitry is reader-supported. If you find the daily brief useful, you can buy me a coffee to keep it going.

Buy a coffee →
Ad
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →

MORE IN THIS BEAT

All Tech →
  • Tech·Oct 29

    DoorDash agrees to acquire Instacart for about $17 billion

    DoorDash and Instacart parent Maplebear announced a definitive agreement under which DoorDash will acquire Instacart for $65 per share, an equity value of about $17 billion.

  • Tech·Oct 29

    Intel shares plunge after hours as Israel fab blast and PC slowdown weigh on outlook

    Intel shares fell 14% in after-hours trading on Oct. 29, per Reuters, with later reports putting the drop at about 17% to more than 20%, after the company guided fourth-quarter revenue below estimates. CFO David Zinsner told Reuters an October explosion at its Kiryat Gat, Israel fab will cut about $600 million of revenue over two quarters.

  • Tech·Oct 29

    Amazon earnings call: AWS backlog reaches $578 billion, 2027 spending to rise "meaningfully"

    On Amazon's third-quarter earnings call, CEO Andy Jassy said AWS has a $578 billion backlog of contracted future revenue, more than double a year earlier, and that Amazon expects to spend meaningfully more on capital projects in 2027 than the roughly $220 billion planned for 2026.

  • Tech·Oct 29

    Rivian R2 becomes company’s top-selling vehicle in Q3

    Rivian’s R2 was the company’s best-selling vehicle by volume in the third quarter, though Rivian did not disclose R2 unit counts. Revenue rose 38% to $2.155 billion, software and services revenue rose 45% to $605 million, and the automotive gross loss narrowed year over year.

  • Tech·Oct 29

    Reddit to require login for all users, starting with tests outside US

    According to CEO Steve Huffman, Reddit will require users to log in to browse the site, beginning with tests in select markets outside the US. The change aims to curb scraping and support advertising.