LLMjacking: The AWS, Google Cloud and Azure settings that cap stolen AI keys

Google's Threat Intelligence Group reports that attackers using stolen cloud tokens and AI keys ran up more than $100,000 in a day, and up to $1 million at some organizations, in what it calls LLMjacking. AI News Report turns the advice into vendor settings: per-deployment tokens-per-minute quotas act within minutes, while budget alerts lag, and Bedrock invocation logging and Google Data Access logs are off by default. The figures are GTIG's own, and the LiteLLM CVE it cites could not be verified against public records.