Jesús Andrade - Tecnochui

🇻🇪 🚨 VENEZUELA: THREAT ACTOR CLAIMS NETWORK COMPROMISE OF INTECH (OIL & GAS SUPPLIER) A threat actor claims to have compromised the network of InTech Instrumentos y Equipos, C.A. (Intech-ie[.]net), a Venezuelan supplier serving Oil & Gas, Petrochemical, Food & Beverage, Pharma, and Power Generation sectors. The actor claims: * Network compromise of InTech Instrumentos y Equipos, C.A. * Initial access via an insecure file-upload vulnerability in a web app * PHP webshell dropped for remote code execution * Multi-sector industrial customer base (Oil & Gas, Petrochemical, Food, Pharma, Power) No numeric record volume was stated in the listing. The claim has not been independently verified. ⚠️ Analyst Note: Named industrial suppliers with alleged RCE/webshell access are high-value CTI even without a row count, because operational and customer data can support supply-chain and sector-targeted abuse. Access vector, scope of exfiltration, and authenticity remain unconfirmed. We assess this as an unverified threat-actor claim, NOT confirmation of a compromise. Source: this is for subscribers only. Subscribe: nitter.cf/DailyDarkWeb/creator-s… #DDW #DarkWeb #Venezuela #OilAndGas #Industrial #DataBreach #ThreatIntelligence #CyberSecurity

🚨 OPENCODE CONFIRMS SECURITY BREACH HITTING 1.4% OF CONSOLE USERS WITH LINKED AI PROVIDERS AI coding-agent platform OpenCode said on X on Oct 17, 2026 that it suffered a security breach overnight, tied to what it calls a "large scale distillation attack." What OpenCode says: • 1.4% of OpenCode Console users were impacted, a subset who had external AI providers linked • All affected users were notified by email on the morning of Oct 17; users who got no email were not impacted • The incident is ongoing, and OpenCode is working with Anthropic, OpenAI and Google to remediate ⚠️ Analyst Note: A distillation attack uses someone else's access to a large AI model to harvest its outputs, often to train a competing model, which makes linked provider API keys the prize. Affected users are reporting unexpected spend alerts and charges on keys they used only in OpenCode. If you received the email, revoke and regenerate any keys linked to OpenCode at each provider and review usage logs. OpenCode has not yet said how access was gained or how many accounts the 1.4% represents. Source: nitter.cf/opencode/status/211151… #DDW #OpenCode #AISecurity #APIKeys #DataBreach #CyberSecurity #ThreatIntelligence