OpenCode, an emerging AI coding tool, reported a security breach impacting 1.4% of its users. Hackers accessed an older system, compromising API keys that allow access to AI services. Users have reported unauthorized charges, with some exceeding $1,000. OpenAI and other companies are working to mitigate the fallout by blocking exposed keys and assisting with refunds.
The incident highlights challenges faced by companies in securing AI systems against cyberattacks, especially when AI models refuse to analyze malicious code due to safety filters. OpenCode is currently investigating the breach and has advised affected users to replace their API keys.