Runaway AI agent racks up $50,000 cloud bill in one hour

Mandiant's AI Risk and Resilience report describes an accounting AI agent that entered a loop and made over 15,000 expensive API calls in less than an hour, accumulating about $50,000 in cloud costs and disrupting work transactions. The report also notes prompt injection attacks, AI supply chain compromises, and the first confirmed case of an AI-developed zero-day.

• Agent made 15,000+ API calls in an hour, accrued ~$50,000 in costs
• Mandiant: prompt injection remains top attack vector for enterprise AI
• In February, VirusTotal found malicious OpenClaw skills with backdoors
• GTIG reported first confirmed zero-day created by cybercriminal using AI