Security News Zero Trust for AI Agents Starts With Fixing Zero Visibility TheHackerNews Daniel Bender 26 Sep 2026 Share METR says an attacker bypassed authentication on an agentic app, obtained an API key, and used $600,000 in tokens over three weeks.