The OpenCode breach explained: what was exposed and what to rotate
What happened, whether your workspace is affected, and which credentials to rotate this week.
Latest brief
The OpenCode breach explained: what was exposed and what to rotate What happened, whether your workspace is affected, and which credentials to rotate this week. Read → All briefs
Newest first · one a weekMythos, Daybreak and Glasswing: what AI bug-hunting means for your site
What AI-found vulnerabilities mean for the software your site runs on.
How every brief works
Every brief answers the same three questions, in the same order, so you can act on it in minutes.
- 01
What happened
A few sentences on the incident, in plain English, with the primary source linked.
- 02
Does it affect you?
A straight yes or no for common setups, and how to check your own.
- 03
What to do this week
Numbered steps you can follow, linked to the full Protect guide.
What triggers a brief?
We publish at least one brief a week. A brief goes out when one of these happens:
- A major breach involving AI tools or AI credentials
- A critical patch for common web software: PHP, WordPress or popular plugins
- A new AI security model or report from Anthropic, OpenAI or Google