#Data Breach

Your API Key Was Someone Else's Credit Card: The OpenCode Console Breach

OpenCode called it a "large scale distillation attack." The victims called it an overnight bill. What happened to OpenCode Console users' stored OpenAI, Anthropic, and Google keys, why a hosted key store changes the blast radius, what "distillation" can and cannot mean here, a twenty-minute key lockdown for each provider, and what anyone building a bring-your-own-key console should change.

Aamir LakhaniOct 19, 202612 min read

Security

Covert Operations: Kill Chain Actions using Security Analytics

By Aman DiwakarIn Special Operations, there are multiple actors on either side of the battlefield, at any point in time, attempting to achieve tactical leverage over the enemy. This leverage comes in multiple forms, at different stages of combat and the entire process is referred to as the “Kill Cha

Aamir LakhaniNov 9, 20186 min read