tech π¨ Hackers drain $600k in AI credits from METR
METR, a research non-profit, disclosed two notable security incidents involving external actors. The incidents occurred in March and May of 2026, targeting its systems. In March, attackers stole an API key and consumed credits worth roughly $600,000. This breach happened after a 'fail-open vulnerability' exposed an agent orchestration dashboard to the public internet. METR has since updated its security policies and improved monitoring protocols. π‘οΈ