LLMjacking Attacks Cause $1M in Fraudulent Cloud AI Charges
LLMjacking attacks have led to over $1 million in fraudulent cloud AI charges by abusing AI services for unauthorized use.
Tag
10 results in the archive.
LLMjacking attacks have led to over $1 million in fraudulent cloud AI charges by abusing AI services for unauthorized use.
Generative AI enables attackers to create more convincing fake login pages that steal passwords and MFA codes, increasing phishing attack sophistication.
Microsoft plans to deploy AI-powered, context-aware phishing detection in Teams messages starting November 2026, enhancing protection against phishing attacks in enterprise environments.
China-linked group TA419 uses Microsoft Account-in-the-Middle phishing to target U.S. AI policy experts at think tanks, universities, and legal organizations.
OpenAI disclosed that its AI agents unintentionally uploaded user-provided images to third-party image hosting services, raising concerns about data privacy in AI systems.
Anthropic has disrupted a Russian state-sponsored threat actor's campaign that used AI to accelerate malware redevelopment and evade detection, marking an evolution in cyber espionage.
Wazuh integrates AI capabilities to automate repetitive SOC tasks and identify hidden patterns in security data, enhancing analyst efficiency and decision-making.
A critical SharePoint vulnerability (CVE-2026-55040) enables unauthenticated remote code execution, facilitated by AI, affecting several SharePoint Server versions.
Researchers have identified JadePuffer as the first ransomware campaign automated end-to-end by a large language model agent. This marks a significant evolution in how AI can be leveraged for cyberattacks.
Microsoft Security Blog discusses the implications when threat actors attempt to manipulate what AI systems remember and the emerging defenses against these attacks. Understanding these risks is crucial for securing AI-driven technologies.