Threat Pulse 62High
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
Severity 4Status unknownreportedCredentials and personal dataAI and software supply chainAI-related

Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services. The tactic is called LLMjacking, a form of resource hijacking adapted for the LLM era, where an attacker obtains an API key through phishing, source code leaks, misconfigured environments, or exposed client-side code

AI angle: Flagged by keyword; a person should confirm the AI link.

· 34 h ago · The Hacker News
Why this score

Machine rubric: impact 3, exploitability 0, critical sector 0, unresolved +1; from The Hacker News (press, capped until a second source or a person confirms).

Updated Nov 5, 01:46 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.