# ThreatsDay Roundup: AI API Key Leaks (OpenCode Console), PingCAP Source Code Theft, Zeabur Breach, NVIDIA AIStore CVE-2026-65162, Signal CVE-2026-113380, Laravel CVE-2026-114509

> The Hacker News ThreatsDay bulletin (2026-10-22) aggregates October 2026 incidents: PingCAP source code and customer data theft via stolen service account credentials, an OpenCode Console breach exposing AI provider API keys for 1.4% of users, the Zeabur breach (3.2M environment variable records) and critical flaws in NVIDIA AIStore (CVSS 10.0), Signal RingRTC (9.3) and Laravel TokenGuard (9.2). It also covers SafePay ransomware (CISA AA26-293A) and Flax Typhoon-linked exploitation infrastructure.

- **Published:** 2026-10-22T18:35:46Z
- **Last reviewed:** 2026-10-22T18:35:46Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-4172
- **ID:** TL-2026-4172
- **Severity:** CRITICAL
- **Category:** DATA_BREACH
- **Status:** ACTIVE
- **Detections:** 9 · **IOCs:** 28 (full data via the Threadlinqs MCP server — Purple tier)
- **CVEs:** CVE-2026-65162, CVE-2026-114509, CVE-2026-113380, CVE-2026-107186, CVE-2026-107187, CVE-2026-107188, CVE-2025-24893, CVE-2024-4577, CVE-2022-47945, CVE-2021-41773, CVE-2017-9841, CVE-2020-3259, CVE-2023-20269, CVE-2023-27532, CVE-2024-40711, CVE-2024-40766

## Description

This record tracks a multi-incident roundup published by The Hacker News on 2026-10-22. The items are independent incidents, not one campaign. Primary sources were checked for the main items.

Secret and credential theft. PingCAP disclosed on 2026-10-19 that attackers used stolen service account credentials between 2026-09-09 and 2026-10-07 to access internal systems, copy data and obtain source code. Exposed data included TiDB Cloud usernames, emails and organization/project associations, customer contacts, contract, pricing and billing details, encrypted API keys, SQL editor content and error logs. PingCAP found no evidence that data stored in TiDB was affected. It disabled the compromised accounts, patched four vulnerabilities (identified 2026-10-12/13, patched 2026-10-14) and added cloud storage access logging. Zeabur reported a second breach on 2026-10-14 after an August 2026 incident. The roundup reports 3.2 million environment variable records and 321,810 account records stolen via leaked internal credentials; Zeabur announced it will shut down by 2026-12-31 and its own post does not specify the vector or exact data scope. OpenCode Console suffered a breach the roundup describes as a large-scale distillation attack affecting 1.4% of Console users and exposing Anthropic, OpenAI and Google AI model API keys. Andromeda AI (identified 2026-10-13, suspected start 2026-10-09) and Genesys internal LMS/CRM systems (2026-10-16) also disclosed incidents.

AI developer tooling. Pillar Security disclosed a remote code execution flaw in opencode (npm opencode-ai, 1.0.137 through 1.18.32, Windows and WSL only). During MCP OAuth discovery, an attacker-controlled remote MCP server returns a malicious authorization_endpoint URL. The URL is passed unvalidated to the open package, which on Windows/WSL hands it to powershell -EncodedCommand, where a $(...) subexpression inside a double-quoted string executes. No user interaction beyond connecting to the server is needed. Reported 2026-08-29, fixed in 1.18.33 on 2026-09-28 (the real fix is the open package upgrade from 10.1.2 to 11.0.4), disclosed 2026-10-04 with no CVE because the vendor did not request one. The roundup also notes an indirect prompt injection against the ChatGPT GitHub connector via public repositories, which OpenAI deemed out of scope.

Critical vulnerabilities. NVIDIA AIStore CVE-2026-65162 (ShadowForge, CVSS 3.1 10.0, CWE-502) lets the legacy ETL InitSpecMsg API forward attacker-supplied Kubernetes PodSpecs without stripping privileged:true or hostPID:true, enabling a privileged pod and nsenter host escape; fixed in AIStore v5.0 on 2026-10-13 (NVIDIA bulletin 5889). Laravel CVE-2026-114509 (CVSS 4.0 9.2) is a TokenGuard authentication bypass on MySQL/MariaDB using crafted non-string credentials; fixed in 13.29.0 and 12.68.0. Signal CVE-2026-113380 (CVSS 9.3) in RingRTC lets a malicious caller keep audio/video tracks enabled after the victim hangs up. Eptura Archibus CVE-2026-107186/107187/107188 (CVSS 8.6/8.5/9.6) cover authentication bypass, full database read and file upload to RCE. GLPI 11.0.8 unauthenticated SQL injection (fixed 11.0.9) and 20 Roundcube issues (fixed 1.6.20/1.7.5) were also reported.

Active adversary activity. CISA advisory AA26-293A (2026-10-20) describes SafePay ransomware, active since August 2024 with 600+ victims. It gains access through VPN/edge-device CVEs (CVE-2020-3259, CVE-2023-20269, CVE-2023-27532, CVE-2024-40711, CVE-2024-40766), brute force or exposed credentials, then moves laterally with PsExec/WinRM, exfiltrates with RClone/FileZilla/WinRAR/7-Zip, disables security software and encrypts files with a .SafePay extension. VulnCheck analysis of Flax Typhoon-attributed infrastructure shows two clusters: hands-on XWiki (CVE-2025-24893) exploitation from Taiwan IPs escalating to reverse shells against India, and automated RedTail-family botnet scanning from a Hong Kong IP against Mexico, the UK and Malaysia, exploiting PHPUnit CVE-2017-9841, Apache CVE-2021-41773, PHP-CGI CVE-2024-4577 and ThinkPHP CVE-2022-47945. Defenders should rotate service-account and API credentials, patch the listed CVEs, and hunt for the TTPs and IOCs below.

## MITRE ATT&CK

- T1078 Valid Accounts
- T1190 Exploit Public-Facing Application
- T1133 External Remote Services
- T1595.002 Active Scanning: Vulnerability Scanning
- T1059.001 Command and Scripting Interpreter: PowerShell
- T1059.004 Command and Scripting Interpreter: Unix Shell
- T1136 Create Account
- T1611 Escape to Host
- T1685 Disable or Modify Tools
- T1110 Brute Force
- T1552.001 Unsecured Credentials: Credentials In Files
- T1021.002 Remote Services: SMB/Windows Admin Shares
- T1567 Exfiltration Over Web Service
- T1490 Inhibit System Recovery

## Sources

- [ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More](https://thehackernews.com/2026/10/threatsday-ai-secrets-leak-pingcap.html)
- [PingCAP Security Update October 2026](https://www.pingcap.com/trust-hub/security/security-update-october-2026/)
- [CISA AA26-293A: SafePay Ransomware](https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a)
- [VulnCheck: Integrity Technology Group advisory analysis (Flax Typhoon)](https://www.vulncheck.com/blog/integrity-technology-group-advisory)
- [Pillar Security: Open and Shut - RCE in opencode via MCP OAuth](https://www.pillar.security/blog/open-and-shut-remote-code-execution-in-opencode-via-mcp-oauth)
- [Zeabur is shutting down](https://zeabur.com/blogs/zeabur-is-shutting-down)
- [Laravel Framework advisory GHSA-f9x3-7vq9-cph6 (CVE-2026-114509)](https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6)
- [ShadowForge: NVIDIA AIStore CVE-2026-65162](https://mauri0x00.pages.dev/posts/shadowforge-aistore/)
- [Signal RingRTC CVE-2026-113380 notes](https://github.com/Imahian/Notes/tree/main/docs/CVEs/CVE-2026-113380)
- [Rapid7: Eptura Archibus authentication bypass, RCE and database read](https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/)
- [Andromeda AI October 2026 security incident](https://andromeda.ai/security-updates/october-2026-security-incident)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-4172