Stolen AI API keys racked up nearly $1M in charges for a single company
khalidkhair · hn · 2026-11-03
Google Cloud's Threat Intelligence blog details the "LLM jacking" threat: stolen AI API keys generated nearly $1 million in charges for a single victim company. Attackers compromise cloud environments, exfiltrate model API credentials, then monetize the free access to large models — often reselling or self-serving the compute. A wake-up call for any team deploying LLM APIs to monitor key usage and quotas.
More from Infra
- Anthropic's signed leases hit ~$321B as purchase commitments jump from $55B to $266B — tengyanAI · 2026-11-04
- Stanford's ParallelKernelBench lands NeurIPS 2026: LLMs nail only 32% of multi-GPU kernels — simonguozirui · 2026-11-04
- SpecPilot: Berkeley and NVIDIA's Agent Loop Auto-Optimizes Speculative Decoding per Deployment — UCBerkeley · 2026-11-04
- AMD exec joins Fireworks AI Forge event to highlight multigenerational partnership — AnushElangovan · 2026-11-04
- Microsoft details Outlook search overhaul: 7 relevance-ranked results and offline resilience — benjamingauthey · 2026-11-04
- AMD exec gifts DHH a 192GB AMD workstation, embraces Omarchy Linux — AnushElangovan · 2026-11-04