Zero Trust for AI Agents Starts With Fixing Zero Visibility
METR says an attacker bypassed authentication on an agentic app, obtained an API key, and used $600,000 in tokens over three weeks.
More info