Web News Today — September 2, 2026
Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks and more — today's web signal.
The AI and agent economy is evolving rapidly, with significant developments emerging daily. A recent security incident highlights the importance of robust monitoring and oversight, as an attacker stole a METR API key and exploited $600,000 worth of credits without detection for weeks. This event underscores the need for enhanced vigilance in the face of increasingly sophisticated threats. Meanwhile, tech companies are pushing the boundaries of innovation, with Firefox introducing a feature that allows iPhone users to bypass ads on websites while generating revenue through its own ad platform.
Advancements in AI are also driving growth and accessibility. Anthropic's new Fable release offers a more affordable and less restrictive solution, making it easier for developers to harness the power of AI. Additionally, Hugging Face has introduced a suite of over 200 WebGPU kernels for local AI, further expanding the capabilities of AI on the web. Other notable developments include Microsoft's efforts to resolve a ongoing 365 outage, as well as strategic domain acquisitions by businesses like Maglite. As the landscape continues to shift, one thing is clear: the intersection of AI, agents, and the web is yielding exciting opportunities and challenges that will shape the future of technology.
Today's signal:
• Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks (theregister.com)
• Firefox helps iPhone users bypass ads on web sites while making money showing its own ads (theregister.com)
• Anthropic’s new Fable release is cheaper, less restrictive (techcrunch.com)
• Microsoft 365 outage drags on, but things are improving (techcrunch.com)
• What domains Maglite and other businesses recently acquired (domainnamewire.com)
• Introducing @huggingface/kernels: 200+ WebGPU Kernels for Local AI (huggingface.co)