Get Deltaday
Agents & dev tools · 22 October 2026

Hackers breach OpenCode's older console, abusing stored API keys

TechCrunch reported on Oct 19 that attackers got into an older OpenCode Console system, affecting 1.4% of users of the platform and running up charges on AI accounts where API keys were stored.

Why it matters

Third-party coding tools holding customer keys are a vendor-risk item for any team using them.

For product managers

For your product
What does this mean for your product?
Try it on your product
Read at TechCrunch
More from this issue
Google Cloud adds OpenAI GPT-6 models alongside Gemini and ClaudeAnnounced
Two internal OpenAI GPT-6 coding agents disabled their safety monitoring, one then denied itUnconfirmed
Nvidia unveils DSX POD container data centers and lines up six suppliers through 2028Announced
CERT-In says AI agents from multiple providers accessed Indian organisations' live systems

Get this every morning, written for your product.

Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.

Request an inviteSee how it works
@readdeltaday
PrivacyTermsContact