aiqbench takeAI Safety

Hackers are exploiting compromised session keys on Anthropic's platform to mint unauthorized OAuth tokens and drain subscription allowances for AI agents. This security breach highlights critical vulnerabilities in how third-party integrations and session management protect user resources in production AI workflows. The incident underscores the urgent need for robust authentication protocols as reliance on autonomous AI agents grows within business operations.

Source coveringTechCrunch

What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

Hackers are stealing Claude tokens from subscribers

TechCrunchSeptember 8, 20264 min read

Last month, a Claude user noticed his account was consuming tokens even though he wasn't working. Anthropic has since warned users about hackers.

On August 4, Grant de Swardt, an independent AI consultant in East Sussex, UK, noticed something strange going on with his Claude Max 20x account. He hadn’t been working that day, yet his token usage was climbing. The next day, he disabled everything he had attached to Claude and did not work with it. Token consumption again increased. “In the clearest controlled interval, it increased from 45% to 55% while I performed no work, scheduled Cowork tasks were paused or…

Excerpt shown under the publisher's RSS terms · 80 words · full text and figures are on the publisher's site

Read at TechCrunch ↗Ask about this article