Summary
SecurityWeek's weekly roundup collects stories that may have slipped under the radar. These are the ones most relevant to defenders.
LLMjacking Bills Reach $1 Million
Mandiant investigated cases where attackers hijacked companies' AI model access, causing fraudulent bills of over $100,000 in a single day and up to $1 million in total. Initial access mostly came from stolen or exposed cloud credentials and API keys. One intrusion exploited CVE-2026-40217 in LiteLLM to escalate keys to admin. Google Threat Intelligence Group also found hijacked access sold through "LLM Mixers," including Jet Night, which it believes offers unlimited plans for about $60 a month.
Takeaway: treat LLM API keys like cloud credentials. Set spend caps and alerts, scope keys narrowly, and patch LiteLLM.
SAP Exploitation Windows Collapse
Onapsis and Recorded Future found the median time from an SAP security note release to verified exploitation or a public proof of concept fell to one to three days, versus 489 days for 2021 patches. Ransomware and extortion groups appearing in SAP-related content rose from 8 in 2023 to 26 in 2025. Underground SAP access listings are priced from $500 to $30,000.
Alleged Implant in a Resold Trezor
Trezor told customers who bought devices from reseller CryptoBilis since March 2026 to move funds to a new wallet with a new seed. A buyer reported a Trezor Safe 5 with an added board holding a cellular module that allegedly captures the recovery phrase and sends it out. Trezor has not verified the report, and no stolen funds have been reported. CryptoBilis also sold Ledger devices that were found tampered with. Buy hardware wallets only from the manufacturer.
Chainalysis Breach Widens
On November 2, Chainalysis found that names, usernames, password hashes, and live tokens for all users were exposed, after earlier saying only non-sensitive data was accessed. Several products, including KYT monitoring, went offline. See our separate coverage of this breach.
Synology NAS Ransomware
Synology warned that attackers are exploiting a flaw fixed in December 2024 on devices running outdated DSM versions, encrypting data and extorting owners. It referenced advisory Synology-SA-24:20 but did not name the flaw. Update DSM now and enable automatic updates.
Flowise "Hello" Attacks
Era researchers described a Chinese-language exploitation framework dubbed Greeter that sent thousands of "hello" chat messages to Flowise honeypots. It abuses CVE-2024-58351 to run commands, hunt for credentials, and attempt persistence. Era counted 4,372 exposed Flowise instances. Of those with identifiable versions, 703 had no authentication.
Other Items
- Phishing with fake AI event invites: Push Security documented fake OpenAI, SpaceX, and Anthropic event pages that use device code phishing through the Kali365 phishing-as-a-service platform.
- Harvard data in Have I Been Pwned: about 851,000 unique email addresses from a November 2025 breach tied to a ShinyHunters extortion attempt.
- Nomad Bridge suspect extradited: Alexander Gurevich appeared in a US court on October 30, accused of stealing about $2.89 million from the Nomad Bridge in August 2022.
- Anthropic and Google: Anthropic added security controls to Claude Enterprise, and Google donated Agent Substrate and gVisor to the CNCF.
Sources
- SecurityWeek, "In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days" (November 6, 2026)