Day's Snapshot by WRF – 3 Nov 2026
Five stories from the last day: LLMjacking costs, Squarespace's layoffs, a Teams help-desk scam, Uber's MCP gateway, and SUSE's job cuts.
LLMjacking: attackers run up a day on stolen AI access
A Google Mandiant and Threat Intelligence report describes attackers hijacking enterprise access to large language models to run up cloud charges, in some cases over ,000 in a day and up to million in total. Entry came through stolen cloud credentials, exposed GitHub tokens and API keys, and internet-exposed LLM endpoints such as Ollama servers. The report advises spending caps, keys scoped to specific models, and treating unauthorised LLM enablement as a critical security event.
Why it matters: Ask AI and cloud partners how model keys are scoped, capped and monitored before they go live.
Squarespace cuts about 19% of its workforce
Squarespace said it is restructuring and reducing its global workforce by about 19%, around 300 people, to simplify operations and sharpen priorities. TechCrunch links the move to shifts in the industry, including AI-powered website builders and Squarespace's own AI push.
Why it matters: If your site sits on a hosted builder, ask your web agency what the exit and migration options are.
Fake IT support on Teams used to steal certificates for privileged accounts
Attackers posed as company help desk staff from outside Microsoft Teams tenants and talked employees into starting a remote-support session. They then abused insecurely configured Active Directory certificate templates to get login certificates for privileged accounts, which stay valid after password resets. Advice includes verifying support requests through known channels, restricting external Teams access and reviewing certificate templates.
Why it matters: Ask your managed IT partner whether external Teams access is limited and who audits certificate templates.
Uber's MCP gateway governs 800+ servers and 5,000+ AI agent tools
Uber built an MCP Gateway that gives AI agents a standard way to find and call internal services, with a registry control plane and a runtime proxy. Tools stay disabled until their owning teams enable them, authorisation is enforced at server and tool level, and sensitive data is redacted from tool responses.
Why it matters: When agencies build agent integrations, ask who approves each tool and how access is limited.
SUSE to cut about one in ten staff, citing automation and AI
SUSE is cutting about a tenth of its roughly 1,900 employees, according to a memo from its CEO. The company says automation and AI are changing how software companies operate and that its current organisation and cost base will not support it. The Register notes its owner EQT was reportedly considering a sale in March.
Why it matters: Open source vendor changes can affect support and roadmaps. Ask partners how they would handle a vendor transition.