🚨 OpenCode Warns Users to Revoke AI API Keys After Console Breach | Details: hacker-magazine.com/opencode… OpenCode is warning users of its Console service that their OpenAI, Anthropic, and Google API keys may have been exposed after hackers breached a legacy system the company was decommissioning. In a statement on X, the company confirmed that 1.4% of Console users were affected and linked the breach to a large-scale distillation attack, in which AI models are queried at scale to collect answers and train competing models. OpenCode’s command-line app is not affected, as it stores provider keys in a local database on the user’s device. #cybersecuritynews #cybersecurity #infosec #hacker

⚠️ Exploit Released for OpenBSD Privilege Escalation Flaw Dating Back to 1988 | Details: hacker-magazine.com/exploit-… A chain of two recently patched OpenBSD kernel vulnerabilities now has a publicly available proof-of-concept (PoC) exploit that allows local attackers to gain root privileges on OpenBSD 7.9 systems. Dubbed “Big Fish” by security firm Calif, the exploit combines an integer overflow dating back to the original BSD code from 1988 with a reference counting bug that leads to a use-after-free, evading KARL, SMAP, and SMEP protections. OpenBSD patched both flaws in September, neither has been assigned a CVE ID, and there is no current evidence of exploitation in the wild. #cybersecuritynews #cybersecurity #infosec #hacker

🛡️ FBI Seizes 187 Laptops From North Korean IT Worker Farms in Texas | Details: hacker-magazine.com/fbi-seiz… The U.S. Department of Justice has disrupted the North Korean Famous Chollima group’s remote IT worker schemes, arresting two suspects, charging 14 people, and seizing 187 laptops from “laptop farms” across Texas. In an operation dubbed “Lonestar Roundup,” the FBI raided more than 40 homes in Texas between September 21 and September 25, seizing company-issued laptops and KVM switches used for remote control. A separate indictment unsealed in the Northern District of Ohio charges 14 people in a scheme that hit more than 70 U.S. companies in 17 states and generated roughly $3 million. #cybersecuritynews

🚨 ConnectWise suspends Cloud Backup After Hackers Breach Microsoft 365 Tenants | Details: hacker-magazine.com/connectw… ConnectWise has suspended its Cloud Backup service after hackers used the application’s compromised credentials to sign in to hundreds of customers’ Microsoft 365 tenants and plant backdoor credentials in other privileged apps. Microsoft Threat Intelligence described the incident as an active supply-chain attack in which the threat actor compromised the trusted OAuth app to obtain access tokens across customer tenants. Huntress has confirmed unauthorized sign-ins in 162 tenants and observed activity from the attackers’ IP address in almost 1,000 Entra tenants, with more than 300 attempts succeeding. #cybersecurity #cybersecuritynews

‼️ CISA Orders Feds to Patch Exploited BeyondTrust, Fortinet Flaws by Monday | Details: hacker-magazine.com/cisa-ord… The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical BeyondTrust Remote Support vulnerability to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch by Monday, October 19. Tracked as CVE-2026-102764, the flaw carries a critical severity score of 9.3 and allows unauthenticated attackers to perform file operations on appliances running Remote Support versions 26.2.3 and earlier. The vulnerability stems from internal components that fail to adequately validate the origin of received messages. Mandiant has linked the zero-day attacks to Armory Castle (formerly UNC5221), a suspected Chinese espionage group. #cybersecurity #cybersecuritynews

🚨 Burger King Japan data breach exposes information of 11.2 million customers Details: hacker-magazine.com/burger-k… #cybersecuritynews #cybersecurity #infosec #hacker

⚠️ Rogue OpenAI model hijacked a crypto wallet to finish its task Details: hacker-magazine.com/rogue-op… #hackermagazine #hacker #cybersecuritynews

OpenAI engineer arrested for allegedly bugging executive conference room hacker-magazine.com/openai-e… #cybersecuritynews #cybersecurity #hacker

India warns of hackers using AI agents to breach networks in hours hacker-magazine.com/india-wa… #hackermagazine #hacker

Critical Next.js flaws let hackers execute code on servers hacker-magazine.com/critical…

PwnEscape Linux kernel flaw allows VM escape with root access hacker-magazine.com/pwnescap…