Topic

LLMjacking

Unauthorised use of someone else's model API keys or AI subscriptions, either to run the intruder's own workloads on the victim's bill or to resell the access to others.

Current clusters

security1 publisher

Stealer logs now carry AI session tokens that replay straight past MFA

Okta's read of one Telegram stealer dump shows commodity malware now hoovering up AI session tokens and API keys, and a replayed token walks past MFA because the second factor was spent when the token was minted.

Publishers:thehackernews.com

Reality

Evidence61
Adoption56
Hype gap+16
Incentives71
Confidence57