Stolen cloud keys are running up $1 million AI bills, Google says. Cap your spend and scope your keys.
Google's threat intelligence team and Mandiant say attackers who steal cloud credentials or AI API keys are billing victims for model use: more than $100,000 in a single day in some incidents, and up to $1 million in total before access was cut. Spending caps, per-model key limits and alerts on new AI service enablement are the fixes.










