#Bitsight

Bitsight: a criminal "AI pentest" tool runs on stolen OpenAI, Anthropic and Google API keys

Bitsight says MONST3R-AI, sold on a restricted forum, scans targets using stolen AI API keys, so the key's owner pays the bill. Treat a leaked AI key like a leaked cloud credential.