CyberHighConfirmedAccelerating
7.6
Critical Langflow RCE exploited to steal OpenAI, AWS credentials
BleepingComputer·about 6 hours ago
Threat actors stole an API key from AI model evaluator METR, leading to $600,000 in unauthorized consumption of public AI model credits. The incident highlights vulnerabilities in AI supply chains and the financial impact of credential theft on security-focused nonprofits.
Entities