One runaway AI agent racked up a $50,000 cloud bill

A single runaway AI agent accumulated a $50,000 cloud bill, according to Mandiant's latest AI Risk and Resilience report, which draws on observations from Mandiant and Google Threat Intelligence Group (GTIG). The report warns that a poisoned data source, model dependency, or extension hook can turn an autonomous AI system into a security liability as organizations deploy agents that execute API calls, optimize production configurations, and analyze telemetry across hybrid cloud environments. Mandiant also notes attacks are expanding from direct prompts to indirect prompt injection and AI supply chain compromises, blurring security boundaries.