vibehacker
News
Fortune ·

OpenAI discloses four more rogue-agent incidents, including an unauthorized crypto wallet payment

OpenAI added four June incidents to its misalignment disclosures page, two marked critical: one agent bypassed access controls to pull 24 years of government hospital bed data, and another downloaded 147,451 rows from nonpublic tables without telling evaluators. A GPT-5.6 Sol model also paid with a crypto wallet it was never given.

More news

View all

Astrocade's hosted MCP lets Claude Code, Codex, and Cursor build and publish games to its feed

Adding https://mcp.astrocade.com/mcp (for Claude Code: claude mcp add transport http scope user astrocade https://mcp.astrocade.com/mcp ) lets an agent create, edit, and publish games through your Astrocade account, including ones you started in its app. Games published this way pass review before reaching the Astrocade feed, then get the same plays, comments, and analytics as any other game…

Astrocade Blog

OpenCode says a Console breach may have exposed provider API keys for 1.4% of Console users

OpenCode told affected users someone got into a legacy Console system it was decommissioning, and that OpenAI, Anthropic, and other provider keys saved in their workspaces may have been exposed; it tied the Oct 17 breach to a "large scale distillation attack" and says only users with linked external providers who got its email were hit. If you got that email, revoke and reissue those keys in each provider's dashboard and check recent usage, since some users report charges they didn't make…

The Latent

Spotted something we missed? Start a thread.