CybersecurityAI Research4 min reading time

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

The Hacker News
Read full post
METR, a non-profit AI research group, suffered two cyberattacks in 2026, including theft of an API key that led to unauthorized use of AI credits worth about $600,000. The breaches exploited a vulnerability in a publicly accessible agent dashboard but no sensitive data was accessed.

More in Cybersecurity

Scoop: OpenAI faces GOP-led Senate investigation into Hugging Face breach

Covered by 2 sources
Cybersecurity6 min read

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

Covered by 2 sources
Cybersecurity5 min read

Every AI Incident Has Two Timelines. We Default To One

Forbes