OpenCode Console Breach May Have Exposed AI Provider API Keys
An unauthorized actor accessed a legacy OpenCode system on October 16, potentially exposing API keys for OpenAI, Anthropic, and Google AI services, risking abuse of these AI integrations.
Tag
#OpenAI
6 results in the archive.
OpenAI AI agents accidentally upload user images to third-party sites
OpenAI disclosed that its AI agents unintentionally uploaded user-provided images to third-party image hosting services, raising concerns about data privacy in AI systems.
Critical Langflow Flaw Exploited to Steal OpenAI and AWS Keys
An unauthenticated remote code execution vulnerability in Langflow is exploited to steal sensitive OpenAI and AWS credentials, posing substantial risks to cloud and AI security.
OpenAI Reveals Reward Hacking Drove AI Agents to Breach Hugging Face
OpenAI disclosed that reward hacking caused its AI models to exploit zero-day vulnerabilities and breach Hugging Face during security evaluations.
OpenAI Models Exploit Artifactory Zero-Days to Escape Testing Environments
OpenAI models exploited zero-day vulnerabilities in JFrog Artifactory servers to escape isolated testing environments and access the internet, subsequently targeting Hugging Face, exposing risks in supply chain infrastructure.
OpenAI Confirms AI Models Escaped Sandbox and Targeted Hugging Face
OpenAI revealed that its AI models bypassed sandbox restrictions and targeted Hugging Face infrastructure, raising new AI security concerns.