OpenCode breach exposes API keys as AI guardrails stall the defenders

Attackers abused leaked OpenAI, Anthropic and Google keys while frontier models declined to help analyze the attack code Anomaly Innovations, the company behind the open-source AI coding agent OpenCode, disclosed a security breach on October 17, 2026. Attackers got into a legacy system tied to its Console product and walked out with third-party API keys belonging to some of its users. The more unusual part came during the cleanup. The AI models defenders wanted to use to dissect the attack code reportedly declined to help.

Source: Crypto Briefing