Technology
Hackers Breach OpenCode Console, Triggering Massive AI Account Bills
Malicious actors recently compromised a legacy system belonging to the AI coding platform OpenCode, exposing API credentials stored within user workspaces on its online console. The breach left developers facing steep unauthorized charges from major AI providers as the stolen keys were exploited overnight. During the incident response, OpenCode's defense team struggled because standard commercial AI safety guardrails frequently blocked their attempts to analyze the malicious code. The event highlights a recurring challenge where strict AI filters inadvertently impede urgent cybersecurity investigations.