Your AI budget might already be funding someone else's chatbot.

Google's Mandiant and Threat Intelligence Group say hackers are hijacking company access to AI models and reselling it, with some victims hit for more than $100,000 a day and up to $1 million. Plus a UK school ransomware attack where AI may have written the hacker's commands.

In rapid fire: Binance's postmortem on the $6.3 billion North Korea heist, Anthropic's $17 billion quarter and shrinking IPO price, and CrowdStrike paying $495 million for two AI agent security startups.

In the Build Window: a kill switch for runaway AI spending.

IN THIS EPISODE

0:00 Cold open and today's stakes

0:40 Google warns of LLMjacking attacks costing enterprises up to $1 million (Google, LLMjacking)

5:50 Rapid Fire: Binance Suffers, Billion Crypto Heist Linked, Anthropic, Q3 Revenue Soars, Cyber Agency Warns, AI-Powered Ransomware Attacks

10:20 UK School Estate Hit by 3AM Ransomware in Suspected AI-Assisted Attack (UK School Estate Hit, Ransomware, Suspected AI-Assisted Attack)

14:55 The Build Window: AI Spend Circuit Breaker, Dev Download Gatekeeper

18:20 What to do this week and our prediction

WHAT TO DO THIS WEEK

If you run cloud or platform engineering, this week put a budget alert and a per-key usage limit on every AI model account you pay for, and rotate any long-lived API keys.

OUR PREDICTION

By 2027-03-31, at least one of AWS, Microsoft Azure or Google Cloud will announce a new default spending limit or usage alert built specifically for generative AI model usage. (we'll check by 2027-03-31)

SOURCES

- SiliconANGLE: https://siliconangle.com/2026/11/02/google-finds-llmjacking-attackers-running-up-100k-a-day-in-fraudulent-cloud-charges

- BleepingComputer: https://bleepingcomputer.com/news/security/uk-school-estate-hit-by-3am-ransomware-in-suspected-ai-assisted-attack

- theverge.com: https://theverge.com/news/1025576/binance-cyrpto-theft-explained

- The Information: https://theinformation.com/briefings/anthropics-revenue-surged-17-billion-q3-swung-back-operating-loss

- The Register: https://theregister.com/security/2026/11/03/britain-on-notice-ai-powered-ransomware-attacks-to-arrive-by-2028/5307200

- SiliconANGLE: https://siliconangle.com/2026/11/03/crowdstrike-to-acquire-cybersecurity-startups-fiddler-ai-dreadnode-for-reported-495m

New episodes every Monday, Wednesday and Friday. Follow Release Candidate so you don't miss one.