AI news
Unauthorized AI use can hit your company's cloud bill
In brief
According to Mandiant, a Google company, and the Google Threat Intelligence Group, a report dated 2 November 2026 shows LLMjacking being used at greater scale. Sysdig introduced the term in 2024 for people who use AI services while another organisation pays. Several 2026 incidents involved finance, technology, commerce and transport.
What it changes for an SME
If you already use cloud AI, leaked or overly shared credentials can create usage you did not request, and your company still pays. For an SME, that is mainly a cost and access-control issue. No new GDPR or EU AI Act duty is described. Treat AI keys like other cloud secrets and watch the spend.
What you can do
- List every AI API key, console and cloud project still in use.
- Revoke unused credentials and limit who can start paid AI calls.
- Turn on a volume or spending alert on your AI accounts.
Intro call · 20 min · free
Let's talk about the time you could save.
In 20 minutes, we find where AI could save you time or money. Free, no commitment.