The METR attacker spent three weeks inside a researcher's cloud instance and touched nothing sensitive. They burned roughly $600,000 in inference credits instead, and that should change how you handle your own keys more than any data breach this year. Short version: a researcher ran agents on a...
Source: [Dev.to](https://dev.to/secbyjasonmiller/your-llm-api-keys-are-cash-the-metr-breach-proves-it-3lal)