OpenCode Security Breach Exposes Third-Party API Keys of its Console Users

OpenCode has disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17 statement, the company linked the incident to a large-scale distillation attack and said it was working with Anthropic, OpenAI, and Google to address it. The affected group was limited to some Console users who had linked external providers. OpenCode said it had emailed everyone affected that morning and stated that users who did not receive an email were not impacted. The percentage refers to Console users, not the entire OpenCode user base. Legacy System Access Put Provider Keys at Risk A notification shared in the supplied screenshot says OpenCode...

Read the full article at the source.