
OpenCode says a breach may have exposed some users' saved OpenAI, Anthropic and Google API keys
The open-source coding agent calls the incident a "large scale distillation attack" that hit about 1.4 percent of OpenCode Console users.
Sunday, October 18, 2026

Huntress says it has found at least 162 compromised tenants in its own environment. Microsoft has confirmed malicious activity tied to the backup service.

The open-source coding agent calls the incident a "large scale distillation attack" that hit about 1.4 percent of OpenCode Console users.

In the operation Citizen Lab calls AdFection, ads bought by Discover-Tech were used to fingerprint and track devices at scale and infect chosen targets without a single click.

Anthropic says the 25-year-old origin of the ECDSA curve seeds makes a deliberate backdoor less likely, and it is donating the $36,864 bounty.

Researcher Matilda Glynn-Henley warns of "agentic flooding" if autonomous assistants are deployed at scale.

A post on X listed aurora-blue-alpha, aurora-green-alpha and aurora-red-alpha without showing any successful request.

After a backlash, Meta says the crawling terms applied only to its ads and business products and do not change how it uses web crawlers.

Junior hires in technical departments fell from 27 percent to 9 percent, and one in five surveyed employees said their job had shifted to "managing Claudes."