57
57
30
Top AI spenders cut per-employee costs by nearly 10 percent in August
Ramp's September AI Index shows top AI spenders' per-employee costs fell 9.7% in August as firms migrate from frontier models to cheaper standard models.
Ramp's September 2026 AI Index reports median per-employee AI spending at the top 1% of spenders fell 9.7% in August to $7,205, partly attributed to August vacations, falling token prices, and migration to cheaper models. The effective price per million tokens dropped 41% from its March 2026 peak to $0.68, and frontier models like Opus, Fable, and Sol fell from 53% to 45% of tokens consumed. Anthropic was paid for by 43.8% of US companies (up 0.34 points) versus 39.8% for OpenAI (up 0.09 points), while open-weight models remain marginal at 6.4% of AI-using firms.
45
30
AI spend per employee slumped at top firms in August — summer doldrums or a warning sign?
Ramp data across 70,000 companies shows August AI adoption grew just 0.4% while per-employee spend at top-spending firms fell nearly 10% to $7,205 amid declining token prices.
Ramp's spending data shows 56% of its customers paid for AI products in August, up only 0.4% month-over-month, with spend per employee in the top 1% of firms down almost 10% to $7,205. Average token costs have dropped to $0.68 per million tokens from a 2026 peak of $1.15 in March after price cuts by OpenAI and Anthropic, and the labs have not yet offset the cuts with volume, with customers shifting to cheaper models like ChatGPT 5.6-Terra and Claude Sonnet. The US Census Bureau's broader survey shows only 22% of businesses report using AI, suggesting Ramp's tech-heavy client base overstates adoption, while only 6.4% of AI-spending businesses used model-serving or inference platforms in August.
45
45
57
60
60
30
57
60
45
55
57
57
57
REVSTEALER ramps up: analysis of up-and-coming infostealer
Elastic Security Labs analyzes REVSTEALER, an emerging infostealer harvesting browser credentials, cryptocurrency wallets, and gaming accounts.
Elastic Security Labs published a deep-dive analysis of REVSTEALER, described as an up-and-coming infostealer. The malware targets browser data, cryptocurrency wallets, and gaming accounts, with credential harvesting as its core function. The report tracks the family's capabilities as it ramps up activity in the wild.
40
60
30
Nation-state hackers ramping up use of Gemini for target reconnaissance, malware coding, Google says
42
60
60
57
60
30
30
30
60
60
30
42
45
57
60
60
30
57
57