English(EN) Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks

AI组织METR因API密钥被盗损失60万美元免费模型积分

作者 PulseAugur 编辑部 · [1 个来源] · 2026-09-01 20:45

AI模型评估组织METR披露了今年早些时候的两起安全事件。在第一起事件中，一名攻击者窃取了一个API密钥，并在三周内滥用了约60万美元的公共模型免费积分，期间未被发现。第二起事件涉及攻击者探测METR公开可访问的基础设施。METR此后加强了安全措施，并聘请了专门的安全负责人。 AI

影响凸显了对API密钥使用情况进行健全的安全措施和监控的必要性，即使是免费积分，也要防止滥用和潜在的财务损失。

排序理由涉及滥用AI模型积分和API密钥的安全事件。

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 14 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 涉及滥用AI模型积分和API密钥的安全事件。
Source corroboration: Single-source cluster; Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics: product, safety; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: Breaking (< 6h); Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准。

The Register — AI TIER_1 English(EN) · 2026-09-01 20:45

攻击者窃取了METR API密钥，使用了价值60万美元的积分，数周无人察觉

The model provider gave METR the credits for free. An actual customer would not have been so lucky