AI Model Evaluator METR Hit by Credential Theft, Probing
LowDark Reading · Alexander Culafi·
In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model credits for the security nonprofit.
Read the full story at darkreading.com ↗Established Source
We summarise and link; this source is not one we hold a licence to reproduce. Everything below is what NexaPulse adds: the vulnerabilities involved, whether they are being exploited, who is named, and who else covered it.
At a glance
- Severity
- Lowfrom category and source signals; no CVSS referenced
- Exploitation
- No vulnerabilities referenced
- Vulnerabilities
- None referenced
- Vendors & products
- None named
- Threat actors & malware
- None named
- Industries
- Not industry-specific
- Coverage
- 1 outlet· first seen 2026-09-01 20:13 UTC
- Priority
- 29/100Source tier, category, exploitation and corroboration. Not a risk score for your environment.
Coverage
One outlet has carried this so far.
2026-09-01 20:13 UTC
Related stories
- Critical MikroTik Vulnerability - Patch Now, (Sun, Sep 6th)
SANS Internet Storm Center · 2026-09-06
- Attackers conceal phishing lures using invisible Unicode characters
BleepingComputer · 2026-09-06
- Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
The Hacker News · 2026-09-05
- Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
The Hacker News · 2026-09-05 · exploited
- numbat - AI agent observability, (Fri, Sep 4th)
SANS Internet Storm Center · 2026-09-05