Updates on API Security

Every AI story we track on API Security: 8 stories so far, each summarized in our own words and linked to the publisher that reported it.

Pulled from 125 sources

This week

Cybersecurity6 min read

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

The Hacker News
Cybersecurity5 min read

Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts

Covered by 3 sources

This month

APIs Were Built For Applications; AI Agents Change The Equation

Forbes
Agents7 min read

Connections: managed credentials and per-caller identity for Managed Deep Agents

LangChain
Cybersecurity8 min read

Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key

The Hacker News

Elevating security, control, and accessibility: Stack Internal 2026.6

StackOverflow
Cybersecurity4 min read

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

The Hacker News
Cybersecurity1 min read

Quoting OpenClaw (running Opus 4.6)

Simon Willison's Weblog
That's everything we have on API Security right now