#apikeyexploit — Public Fediverse posts

Threat Actors Exploit API Key, Drain $600,000 in AI Credits

In a shocking security breach, threat actors made off with a whopping $600,000 in AI credits after exploiting a stolen API key from AI safety research group METR over just three weeks. The incident began with a researcher inadvertently leaving a public EC2 instance exposed, despite Google authentication, due to a fail-open flaw and a…

https://osintsights.com/threat-actors-exploit-api-key-drain-600000-in-ai-credits?utm_source=mastodon&utm_medium=social

#ApiKeyExploit #AiSafety #CloudSecurity #EmergingThreats #FailopenFlaw

Threat Actors Exploit METR API Key, Drain $600,000 in AI Credits

A staggering $600,000 in AI credits vanished in a flash when an unknown attacker exploited a stolen API key, infiltrating a publicly accessible experiment and racking up a massive bill that was thankfully waived by the model provider. The shocking breach happened after a researcher inadvertently left an EC2 instance exposed, despite having…

https://osintsights.com/threat-actors-exploit-metr-api-key-drain-600000-in-ai-credits?utm_source=mastodon&utm_medium=social

#ApiKeyExploit #Metr #CloudSecurity #AiCredits #SupplyChain