Tag:canary-tokens
All the articles with the tag "canary-tokens".
Somebody Is Hunting For Your AI API Keys With A Fake GrokBot User-Agent
hrbrmstrSix Google Cloud VMs rotated through a honeypot fleet over six days, stole 53 canary AWS credentials, and tried to spend them on Amazon Bedrock's cheapest model within ten seconds of each theft. The stolen credential playbook is new. The identity spoof it depends on is not. If you run anything that serves files over HTTP and holds AI provider keys in environment variables, read this.