Attackers hijack corporate AI model access, running up cloud bills of up to $1 million
AI SECURITYUNC6993redteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Criminals are stealing access to companies' paid artificial intelligence services and reselling it to others. The victims are left with huge cloud bills, with some reaching nearly $1 million. Researchers say the attacks often start with leaked or stolen passwords and access keys.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Rotate any exposed cloud credentials, service account keys, API keys and GitHub tokens.
- Scan repositories and secret managers for leaked keys and passwords.
- Investigate unexpected AI service activation, new access keys, and unusual model requests.
- Patch LiteLLM gateways against CVE-2026-40217 and enforce model-specific quotas.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Threat actors
Products