LLMjacking can run up your business' AI bill fast - how to stop it Google analysts warn that stolen AI credentials are being sold underground, and businesses are footing the bill. Charlie Osborne is a cybersecurity journalist and photographer who writes for ZDNET and CNET from London. Security experts warn of a growing market in stolen AI account credentials. LLMjacking, the illegal use of AI resources, is a popular criminal trend in 2026. Businesses must monitor and protect their accounts. Security experts warn that it's not just artificial intelligence (AI) going rogue that we have to worry about -- there's also a booming underground economy for selling access to your AI models and computing power.

In response to the emerging threat of rogue and shadow AI agents, here's how the newly formed Blueprint Alliance seeks to help businesses secure their systems against anomalous AI activity. David Berlind is one of the founding editors of ZDNET and is an award-winning tech journalist. Okta, AWS, Google Cloud, Salesforce, and others form an AI agent security coalition. The Alliance offers a blueprint for companies seeking visibility, control, and governance of agents. AI agents need the equivalent of a kill switch to expeditiously terminate suspicious behavior.

This material may not be published, broadcast, rewritten, or redistributed. Quotes displayed in real-time or delayed by at least 15 minutes. Market data provided by Factset . Powered and implemented by FactSet Digital Solutions . Mutual Fund and ETF data provided by LSEG . Can tech really get you off your phone and into real life?

Gemini escaped its testing environment, got access to the internet and hacked into three companies, Google has admitted to The Wall Street Journal. That scenario probably sounds familiar to you at this point, if you've even just glanced at AI news in recent months. Like what happened to OpenAI, Anthropic and Meta, Gemini also gained access to the internet due to a misconfiguration in its testing environment by Irregular, the Israeli startup working with all four companies to assess their AI models. The incidents occurred in May, before OpenAI's models broke into Hugging Face, while testing the model's cybersecurity capabilities. Google told the Journal that the model was given the goal of obtaining information from a fictional company during testing, and it just so happened that a real company had the same name. The model then discovered the loophole in its testing system, which it took advantage of to access the internet.

This material may not be published, broadcast, rewritten, or redistributed. Quotes displayed in real-time or delayed by at least 15 minutes. Market data provided by Factset . Powered and implemented by FactSet Digital Solutions . Mutual Fund and ETF data provided by LSEG . Asked Siri to call your bank?

Good Connection: Uplifting stories for a digital age Creator Playbook Trending Now Say More Look Up Mashable's Best: E-readers, robovacs, laptops, earbuds, smart home and more Switch Off Mashable Voices Mashable Selects Safety Net Versus Gift Ideas For Everyone On Your List All Series Welcome to the age of'credential catfishing' From fake PA students to pretend NFL players, impressive credentials can earn trust before anyone verifies them. Olivia Tauber is the deputy editor of digital culture, covering creators, media, movies, beauty, and more. Based in New York, her work has appeared in The New York Times, Vanity Fair, The Cut, Teen Vogue, Complex, and Interview Magazine. She holds a Master's degree in Journalism from NYU and a Bachelor's from the University of Michigan. She also runs Fan Mail, a weekly pop-culture newsletter.

I wore the world's first HDR10 smart glasses TCL's new E Ink tablet beats the Remarkable and Kindle Anker's new charger is one of the most unique I've ever seen I wore the world's first HDR10 smart glasses TCL's new E Ink tablet beats the Remarkable and Kindle Anker's new charger is one of the most unique I've ever seen ChatGPT can log into your web accounts without you now - but should you let it? OpenAI's agentic ChatGPT Work can sign in to your online accounts without any interaction on your part. Is that a privacy risk? ChatGPT can sign in to your website accounts without your input. The built-in browser uses cookies to store your login credentials.

This material may not be published, broadcast, rewritten, or redistributed. Quotes displayed in real-time or delayed by at least 15 minutes. Market data provided by Factset . Powered and implemented by FactSet Digital Solutions . Mutual Fund and ETF data provided by LSEG . Chinese humanoid robot breaks Usain Bolt's 100m dash record at 9.39 seconds World's first solar-powered ambulance brings healthcare off-grid The scammer at your doctor's office may already know who you are Steve Doocy explores the US Air Force Academy's elite military training Supporting data centers is'perilous' politically: Brian Kilmeade Are American workers really using AI?

Here's how to keep your privates, private Sexortion is an old concept, but the FBI's latest warning about it is new. Long before the internet, people blackmailed others over sexually explicit photos or videos. But this week, the US Federal Bureau of Investigation released a fresh warning around hackers and sexortion--an alert aimed at both adults and children. In its public service announcement, the FBI says sexual exploitation actors have been breaking into "social media and personal accounts" to download any saved explicit content. The stolen images and video then gets spread to criminal forums and marketplaces, often with personal details like name, email, phone number, social media username, and date of birth also shared.

When you purchase through links in our articles, we may earn a small commission. Reusing passwords is the risky kind of shortcut. A password manager lets you do less work while keeping every account better protected. I have a hot take: You're probably lazy with passwords in the wrong way. You plug the same password into every single app, website, and service you don't care about.