Attacker stole METR API key, used $600K of credits, no one noticed for weeks

(theregister.com) by joebuckwilliams | Sep 1, 2026 | 0 comments on HN