#LLMjacking
All CosmicBytez Labs articles tagged #LLMjacking, across news, security advisories, how-to guides, and projects.
- News
Fireworks AI Breach Widens to Customer Datasets, Model Weights and Notion AI Chats
Fireworks AI says its October incident also exposed billing data, secrets, datasets and incomplete model weights; Notion reports under 1% of workspaces hit.
- News
LLMjacking Emerges as a Thriving Cybercriminal Enterprise
Google's Mandiant and GTIG report attackers reselling stolen cloud LLM access, with some victims billed up to $1 million before access was revoked.
- News
In Other News: Trezor Implant, LLMjacking Bills Hit $1M, SAP Flaws Weaponized Within Days
Roundup: an alleged implant in a resold Trezor, LLMjacking losses up to $1M, SAP exploits in 1-3 days, Synology NAS ransomware and Flowise attacks.
- News
Google Warns LLMjacking Is Costing Enterprises Up to $1 Million in Cloud Charges
Google GTIG and Mandiant say hijacked cloud and LLM credentials are resold via 'LLM mixers', with fraudulent bills topping $100,000 a day.
- News
Northflank Breach Leads to Abuse of Customers' AI API Keys
Northflank tells customers to treat all environment variables as compromised after unauthorized use of AI API keys on its cloud platform.