The Wall Street Journal 2026-10-27-2
AI Hacks Are Coming Thick and Fast and Overwhelming the Internet
Parsons was billed $449 across about 50 charge emails overnight after attackers drained Anthropic and OpenAI credentials stored in OpenCode, and other users reported $1,700. The target was inference spend, so a stored key behaves like a card number. Governments in Canada, Belgium, France and the Netherlands took sites offline rather than wait for patches against bugs that could expose up to 70% of websites, the move Sima's account says stops working once the attacker holds your own keys.