TechnologySaturday, October 17, 20261 min read

Anomaly Innovations, behind coding agent OpenCode, says a breach hit ~1.4% of OpenCode Console users and their API keys, in a "large scale distillation attack" (Walter Schulze/Startup Fortune)

By Techmeme · Published by Everything Blog

In short

An anomaly in the coding agent OpenCode resulted in a security breach affecting 1.4% of users and their API keys, indicating a "large scale distillation attack" by a third-party actor exploiting vulnerabilities in the platform. This incident highlights the importance of robust security measures to protect user data.

Key points

An anomaly in OpenCode resulted in a significant security breach.: An anomaly in OpenCode resulted in a significant security breach.
The breach affected approximately 1.4% of users and their API keys.: The breach affected approximately 1.4% of users and their API keys.
The incident was carried out by a third-party exploiting vulnerabilities in the platform.: The incident was carried out by a third-party exploiting vulnerabilities in the platform.

Sources checked by our analysis pipeline: 1

Steven Zeitchik / The Hollywood Reporter: |

Chase DiBenedetto / Mashable: |

Bloomberg: |

Joe Barnes / Telegraph: |

Saritha Rai / Bloomberg: |

Jean Eaglesham / Wall Street Journal: |

Walter Schulze / Startup Fortune: |

Preeti Singh / Bloomberg: |

Zack Abrams / The Block: |

Rafe Rosner-Uddin / Financial Times: |

Nilay Patel / The Verge: |

Mike Butcher / Pathfounders: |

Kyohei Suga / Nikkei Asia: |

FinTech Global: |

Terrence O'Brien / The Verge: |

This is a Techmeme archive page. It shows how the site appeared at 4:50 PM ET, October 17, 2026.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.

Malia Spencer / Portland Business Journal: |

Anthropic: |

Financial Times: |

Marcus Mendes / 9to5Mac: |

Owen Dahlkamp / Politico: |

Michael Acton / Financial Times: |

Andrew E. Freedman / Tom's Hardware: |

Prathik Jayaprakash / Reuters: |

Original source: www.techmeme.com

AI Analysis

Tone

Negative

In short

Key Points

An anomaly in OpenCode resulted in a significant security breach.: An anomaly in OpenCode resulted in a significant security breach.
The breach affected approximately 1.4% of users and their API keys.: The breach affected approximately 1.4% of users and their API keys.
The incident was carried out by a third-party exploiting vulnerabilities in the platform.: The incident was carried out by a third-party exploiting vulnerabilities in the platform.

Topics

Technology

AI Analysis

Tone

Negative

In short

Key Points

An anomaly in OpenCode resulted in a significant security breach.: An anomaly in OpenCode resulted in a significant security breach.
The breach affected approximately 1.4% of users and their API keys.: The breach affected approximately 1.4% of users and their API keys.
The incident was carried out by a third-party exploiting vulnerabilities in the platform.: The incident was carried out by a third-party exploiting vulnerabilities in the platform.

Topics

Technology

'Efficacy of curbs not proved': SC against blanket internet ban on kids over safety
The Supreme Court has ruled that the right to access and use the internet is a fundamental right under Article 21 of the Constitution. However, the court emphasized that blanket restrictions on children's access to the internet are ineffective and disproportionate, and that some age-based restrictions and safeguards should exist to ensure the safety of children online. The court has ruled that the efficacy of curbs is not proved.
2 min read
Meta removes language that raised scraping and AI training concerns
Meta recently clarified its commercial terms of use, removing language that could have given the company the ability to scrape and train AI models from any publisher with a Meta business account. This update was met with concerns from legal experts who argued it could allow Meta to scrape any publisher's website and use the content for AI training. However, Meta spokespersons have since stated that the updated terms do not reflect a change in the company's web crawling methods, and the provision has been removed.
1 min read
'War booty': Cheap iPhone 18s advertised in Tehran after Hormuz shipwreck
The "war booty" iPhones advertised in Tehran are being sold at discounted prices, sparking concerns over potential scams and the impact of maritime tensions in the region. The advertisements have emerged after a reported shipwreck near the Hormuz Strait, with videos showing containers containing iPhones and perfumes floating in the sea. Cyber police advise buyers to avoid paying deposits or advance fees before inspecting the products and verifying sellers' identities.
1 min read

Anomaly Innovations, behind coding agent OpenCode, says a breach hit ~1.4% of OpenCode Console users and their API keys, in a "large scale distillation attack" (Walter Schulze/Startup Fortune)

In short

Key points

More in Technology