Sari la conținut

localeBeta.label localeBeta.notice localeBeta.readInEnglish

perspectiva aiqbenchSiguranță AI

analiza aiqbench

This incident highlights a critical vulnerability in the AI supply chain where compromised API keys enable large-scale model distillation attacks, directly impacting user costs and exposing the risks of using unrestricted AI models for security operations. The event underscores the growing challenge for open-source developers to defend against sophisticated cyberattacks that leverage AI tools themselves, necessitating stricter vetting of access controls for generative models.
Sursă care acoperăTechCrunch
Ce este aceastaLectura unui model asupra articolului și a acoperirii conexe, scrisă pentru aiqbench. Nu sunt cuvintele publicației.

Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts

TechCrunch4 min de cititArticolul și perspectiva sunt în engleză.

OpenCode is an open source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.

OpenCode, an open-source AI coding agent that has been gaining ground among developers as an alternative to Claude Code and Cursor, said Saturday that attackers broke into an older system overnight, affecting 1.4% of users of its online platform, OpenCode Console, where some users store the API keys, or digital passwords, they use to access AI services. As the OpenCode team struggled to keep pace with the attack, the scramble to respond highlighted a growing problem: companies without vetted access to AI…

Extras afișat conform termenilor RSS ai publicației · 82 cuvinte · textul integral și figurile sunt pe site-ul publicației

Subiecte conexe