30
30
One runaway AI agent racked up a $50,000 cloud bill
Mandiant's AI Risk and Resilience report details prompt injection, AI supply chain compromises, agent abuse, and a runaway agent that accrued $50,000 in cloud charges.
Mandiant, drawing on Google Threat Intelligence Group (GTIG) observations, warns that poisoned data sources, model dependencies, and extension hooks can turn AI agents into channels for reconnaissance, lateral movement, and sandbox escape. Mandiant responded to incidents involving UNC6780 (TeamPCP), who stole AI service credentials and used prompt injection against AI coding assistants, while GTIG disclosed the first confirmed criminal use of an AI-developed zero-day exploit in a planned mass exploitation campaign. Red team tests showed an AI assistant manipulated into cloning internal repositories to an external GitHub account, and a runaway accounting agent made over 15,000 costly API calls in under an hour, generating roughly $50,000 in cloud charges.
68
Read the Apple document explaining how new listening features still protect your privacy
Apple published a document explaining its new Audio Intelligence features process audio in a hardware-isolated Secure Exclave inaccessible to Apple, apps, or the OS.
Apple released a privacy document alongside the Siri AI Audio Intelligence features announced at its iPhone event, covering Siri Recap, Live Rewind, Sound Recognition, and Music Recognition. It states microphone audio is processed in the Secure Exclave of the S11 chip in Apple Watch Series 12 and Apple Watch Ultra 4, is never saved as a file, and cannot be accessed by watchOS, apps, the user, or Apple. Transfers between watch and iPhone are encrypted between Secure Exclaves, and transcripts sync end-to-end encrypted when a device passcode and iCloud two-factor authentication are enabled.
30
30
30
30
30
30
30
30
30
30