Severity: HighAction: Be aware

OpenCode hack exposes API keys amid AI distillation attacks

The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.

Excerpt from the primary source: BleepingComputer

Who is affected

Developers

What you should do · Be aware

No immediate action is indicated. Share this with the relevant teams and watch for updates.

Automated guidance based on this story's classification. Check the linked advisories for specifics.

Sources

We link to original and authoritative sources. Headlines and excerpts belong to their publishers.

Original reporting

OpenCode hack exposes API keys amid AI distillation attacks BleepingComputer · bleepingcomputer.com · Oct 19, 2026 · Primary source
Severity: HighAction: Be aware

Hackers hijack AOMEI update servers to secretly spread malware

Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a…

Severity: ElevatedAction: Be aware

Hackers steal customer data from major Russian hosting provider FirstVDS

Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers.

OpenCode hack exposes API keys amid AI distillation attacks | CybersecurityNews.us