[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRz61sypmp6JpSBg6ZIcQ8GEGatvle3_1bfW2dDnwhJ4":3},{"article":4,"iocs":51},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":29,"category":30,"article_tags":33},"98ea6c42-17be-43c7-95ca-5fe2ef886077","AI Model Evaluator METR Hit by Credential Theft, Probing","ai-model-evaluator-metr-hit-by-credential-theft-probing-19d1bd","In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model credits for the security nonprofit.","The AI model evaluation nonprofit METR has been targeted by threat actors who successfully stole an API key. This credential theft allowed the attackers to access and use METR's public AI model credits, resulting in a loss of approximately $600,000. The incident highlights the risks associated with API key management and the potential financial impact of credential compromise.","METR, a security nonprofit, suffered credential theft leading to $600K in stolen AI model credits.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fidentity-access-management-security\u002Fai-model-evaluator-metr-credential-theft-probing","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fbltd6fa067a2ef7c79c\u002F6a971debd849dc198a50a854\u002Fevaluation-Charday_Penn-GettyImages-1297604574.jpg?width=720&quality=80&disable=upscale","2026-09-01T20:13:09+00:00","2026-09-01T22:00:28.71475+00:00",7,[18,21,23,26],{"name":19,"type":20},"API key","product",{"name":22,"type":20},"AI model credits",{"name":24,"type":25},"METR","vendor",{"name":27,"type":28},"AI model","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":29,"icon":11,"name":31,"slug":32},"Breaches","breaches",[34,39,41,46],{"category":35},{"id":36,"icon":11,"name":37,"slug":38},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":40},{"id":29,"icon":11,"name":31,"slug":32},{"category":42},{"id":43,"icon":11,"name":44,"slug":45},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":47},{"id":48,"icon":11,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[52],{"type":53,"value":54,"context":55},"malware","credential theft","Method used by threat actors to gain access"]