{ "type": "bundle", "id": "bundle--db573a74-0102-4ace-825a-a5f46dc59d54", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--b106305c-0100-414a-84ff-91eeab20701a", "created": "2026-10-17T00:00:00.000Z", "modified": "2026-10-17T00:00:00.000Z", "name": "Optimus Labs · Civilizations", "identity_class": "organization", "description": "Threat research team at Optimus Labs. Agentic AI attack surface research.", "contact_information": "https://optimuslabs.io/research/briefings" }, { "type": "report", "spec_version": "2.1", "id": "report--7a31e197-0102-459e-8b33-e4097b33e735", "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a", "created": "2026-10-17T00:00:00.000Z", "modified": "2026-10-17T00:00:00.000Z", "name": "OpenCode Console Breach: Your Provider Keys, Their Custody", "description": "An intruder reached a legacy OpenCode Console system and may have exposed provider API keys that teams saved there, for 1.4% of Console users. OpenCode has not said how.\n\nLive incident, as of Oct 21, 2026. On the night of Oct 16, an intruder reached a legacy OpenCode Console system that the team was shutting down. Console is OpenCode's hosted gateway: teams save their own Anthropic, OpenAI and Google API keys there so members can use the models without seeing the keys. OpenCode describes the breach as related to a large scale distillation attack and says 1.4% of Console users may have had keys exposed. Anthropic revoked affected Claude keys, Google blocked affected Gemini keys, and OpenAI says it is refunding credits drawn in the attack. As of Oct 21, OpenCode has not published a root cause, entry point, dwell time or key count.", "published": "2026-10-17T00:00:00.000Z", "report_types": [ "threat-report" ], "confidence": 85, "labels": [ "Vendor breach", "AI Asset Supply Chain Security", "Cyber Hygiene", "severity:high" ], "object_refs": [ "software--76372af0-0102-4ded-8735-971d7739e8dd", "software--09ffac08-0102-4fb4-88fd-03bc0b025bbc", "software--27c64a28-0102-4246-86c4-a86e28c92c6e", "software--b9ab50c8-0102-4627-8475-62911baadd6e", "software--213c7723-0102-44d2-803e-e3f1223f0bf5" ], "external_references": [ { "source_name": "Optimus Labs · Civilizations", "url": "https://optimuslabs.io/research/briefings/opencode-console-breach-provider-key-exposure" }, { "source_name": "OpenCode statement on X, Oct 17", "url": "https://x.com/opencode/status/2111519637049319818" }, { "source_name": "Dax Raad: Console, not the app", "url": "https://x.com/thdxr/status/2111572618340188393" }, { "source_name": "Dax Raad: refunds", "url": "https://x.com/thdxr/status/2111608620441817449" }, { "source_name": "Dax Raad: 48 hours of attacks", "url": "https://x.com/thdxr/status/2111790511409258796" }, { "source_name": "Dax Raad: 26T token days", "url": "https://x.com/thdxr/status/2105448734272401788" }, { "source_name": "Lydia Hallie, Anthropic", "url": "https://x.com/lydiahallie/status/2111563956666110287" }, { "source_name": "Evan Otero, Google", "url": "https://x.com/EvanOtero/status/2111591525876474100" }, { "source_name": "Tibo Sottiaux, OpenAI", "url": "https://x.com/thsottiaux/status/2112034063934742720" }, { "source_name": "TechCrunch, Oct 19", "url": "https://techcrunch.com/2026/10/19/hackers-hit-ai-coding-tool-opencode-running-up-charges-on-users-ai-accounts/" }, { "source_name": "BleepingComputer, Oct 19", "url": "https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/" }, { "source_name": "The Hacker News, Oct 19", "url": "https://thehackernews.com/2026/10/opencode-console-breach-may-have.html" }, { "source_name": "The Latent, Oct 17", "url": "https://thelatent.co/models/opencode-says-breach-tied-to-distillation-attack-exposed-users-ai-provider-keys" }, { "source_name": "YC Root Access: Jay V interview", "url": "https://www.ycrootaccess.com/p/how-opencode-became-the-worlds-most" }, { "source_name": "Anthropic threat report, Sep 2026", "url": "https://www.anthropic.com/threat-intelligence-report-september-2026" }, { "source_name": "Anthropic: distillation defences, Oct 12", "url": "https://www.anthropic.com/research/distillation-defenses" }, { "source_name": "OWASP Top 10 for Agentic Applications 2026", "url": "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/" }, { "source_name": "OWASP Top 10 for LLM Applications 2026", "url": "https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/" }, { "source_name": "OpenCode Zen docs", "url": "https://opencode.ai/docs/zen/" }, { "source_name": "GHSA-vxw4-wv6m-9hhh", "url": "https://github.com/anomalyco/opencode/security/advisories/GHSA-vxw4-wv6m-9hhh" }, { "source_name": "GHSA-c83v-7274-4vgp", "url": "https://github.com/advisories/GHSA-c83v-7274-4vgp" }, { "source_name": "OpenCode advisories", "url": "https://github.com/anomalyco/opencode/security" }, { "source_name": "OWASP Secrets Management Cheat Sheet", "url": "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html" }, { "source_name": "OWASP Key Management Cheat Sheet", "url": "https://cheatsheetseries.owasp.org/cheatsheets/Key_Management_Cheat_Sheet.html" }, { "source_name": "OWASP Cryptographic Storage Cheat Sheet", "url": "https://cheatsheetseries.owasp.org/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html" }, { "source_name": "NIST SP 800-57 Part 1 Rev. 5, Recommendation for Key Management", "url": "https://csrc.nist.gov/pubs/sp/800/57/pt1/r5/final" }, { "source_name": "Cloud Security Alliance research note, Oct 20", "url": "https://labs.cloudsecurityalliance.org/research/csa-research-note-opencode-console-provider-key-breach-20261/" } ] }, { "type": "software", "spec_version": "2.1", "id": "software--76372af0-0102-4ded-8735-971d7739e8dd", "name": "OpenCode" }, { "type": "software", "spec_version": "2.1", "id": "software--09ffac08-0102-4fb4-88fd-03bc0b025bbc", "name": "Anomaly" }, { "type": "software", "spec_version": "2.1", "id": "software--27c64a28-0102-4246-86c4-a86e28c92c6e", "name": "Anthropic" }, { "type": "software", "spec_version": "2.1", "id": "software--b9ab50c8-0102-4627-8475-62911baadd6e", "name": "OpenAI" }, { "type": "software", "spec_version": "2.1", "id": "software--213c7723-0102-44d2-803e-e3f1223f0bf5", "name": "Google" } ] }