OpenCode Breach May Have Exposed OpenAI, Anthropic and Google API Keys, Users Report Unexpected Charges

OpenCode says a breach may have exposed OpenAI, Anthropic and Google API keys saved by 1.4% of Console users, with some ...
CoinCentral

Railway Hack Explained: How a Platform Breach Led to $371,000 in Crypto Theft

Railway disclosed a security breach. Researcher Taylor Monahan links about $371,000 in crypto theft across 19 chains to the ...

API Key Leak at AI Coding Tool 'OpenCode' Leads to Unauthorized Charges: What Happened and 5 Settings to Protect Your Balance Today

October, the online service for the open-source AI coding tool 'OpenCode' was attacked, resulting in the leak of OpenAI, ...

Is the API an extra charge? The flow of asking AI on your smartphone and where the money goes

"What is an API?""Is what I'm using now okay?"This is a term I didn't really understand even after reading the ...
MediaNama

Railway urges users to revoke API keys after cyberattack exposes customer secrets

Railway urges users to rotate API keys and credentials after a cyberattack potentially exposed sensitive customer data.
Infosecurity-magazine.com

Google API Keys Quietly Gain Access to Gemini on Android Devices

A flaw in Google's API key system has reportedly exposed mobile applications to unintended access to its Gemini AI platform. According to a CloudSEK advisory published on April 8, the issue affects ...
BleepingComputer

Previously harmless Google API keys now expose Gemini AI data

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI assistant and access private data. Researchers found nearly 3,000 such ...
Help Net Security

Microsoft shortens NuGet API key lifetime to improve supply chain security

Microsoft is reducing the lifetime of new NuGet.org API keys from 365 days to 30 days starting August 17, 2026, to improve the security of NuGet, its package repository for .NET developers. API keys ...