This week: Microsoft describes how the AI framework ARTEX turned leaked GitHub secrets into Key Vault theft within five minutes in one case, Microsoft postpones default usage-based billing for Copilot Business to January–March 2027, Google reports LLMjacking with bills of up to $1 million, Microsoft has users without a Copilot licence running into fair use limits, OpenAI found 948 Linux exploits using an AI pipeline, Microsoft introduces Business Central and Copilot Business bundles from $95, and CrowdStrike launches an AI Kill Switch.
- Microsoft sees attackers using AI framework ARTEX turn leaked GitHub secrets into Key Vault theft within five minutes in one case
- Microsoft postpones default usage-based billing for new Copilot Business licences in CSP to January–March 2027
- Google reports that hijacked LLM access cost some organisations up to $1 million
- Microsoft introduces fair use limits for Copilot Chat for users without a Microsoft 365 Copilot licence
- OpenAI reports that an AI pipeline found 948 working privilege escalation exploits for Linux
- Microsoft introduces CSP bundles of Business Central and Copilot Business from $95 per user per month
- CrowdStrike introduces an AI Kill Switch that blocks agents’ model access
Microsoft sees attackers using AI framework ARTEX turn leaked GitHub secrets into Key Vault theft within five minutes in one case
On 5 November, Microsoft published a report on attackers using the agentic AI framework ARTEX to scour public GitHub repositories for exposed credentials and API keys. Once it finds something, the agent carries out follow-up actions autonomously.
- In one case, the agent went from finding a secret on GitHub to exfiltrating data from Azure Key Vault in five minutes.
- After an error message, the agent adjusted its request within 28 to 80 seconds, for example by using a different API version, and then succeeded in gaining access.
- A leaked credential belonging to a vendor’s multitenant app gave access to downstream tenants, with sign-ins to dozens of applications across multiple Entra ID tenants.
- Microsoft advises MSPs to review Partner Center access, GDAP relationships and customer tenants, and to treat exposed credentials as compromised, even after they have been removed from the repository.
Source: Microsoft Security Blog
Microsoft postpones default usage-based billing for new Copilot Business licences in CSP to January–March 2027
Microsoft announced on 3 November that usage-based billing will be enabled by default for new Microsoft 365 Copilot Business subscriptions in CSP purchased in the third quarter of fiscal year 2027, i.e. from January to March 2027. The date had previously been 1 December 2026.
- The default limit is 4,000 Copilot Credits per user per month, adjustable in Partner Center or the Microsoft admin centre, and pay-as-you-go is the default configuration.
- A new purchase also enables usage-based billing for existing Copilot Business licences in the same tenant.
- The scenarios cited are Copilot Cowork, Work IQ APIs and GitHub Copilot Harness.
- The Partner Center sandbox, which was due to start on 2 November, does not yet have a new date, and the feature will also be available in the Netherlands, Belgium, Germany and France.
Source: Microsoft Partner Center
Google reports that hijacked LLM access cost some organisations up to $1 million
On 2 November, the Google Threat Intelligence Group published a report on LLMjacking: the abuse of stolen cloud identities and API keys to use AI services at the victim’s expense. According to Google, victims are located in North America, South America and Asia-Pacific.
- Individual incidents generate more than $100,000 in fraudulent cloud costs per day, and at some organisations this rose to $1 million before access was revoked.
- The Jet Night service made more than 500,000 API calls in under eight hours, amounting to around $1 million in token costs, and sells unlimited access for roughly $60 per month.
- Stolen or exposed cloud identities, such as IAM credentials, service account keys and GitHub tokens, are the dominant access route.
- Google cites CVE-2026-40217 in LiteLLM as a route to admin privileges and recommends budget alerts, spending limits and per-model quotas.
Source: Google Threat Intelligence Group
Microsoft introduces fair use limits for Copilot Chat for users without a Microsoft 365 Copilot licence
On 4 November, Microsoft announced fair use limits on additional Copilot Chat features for users without a Microsoft 365 Copilot licence in commercial tenants. Copilot Chat remains part of Microsoft 365 subscriptions and admins do not need to take any action.
- The limits have applied since 2 November to organisations with up to 2,000 Microsoft 365 seats and take effect for larger organisations on 9 November.
- Admins cannot view or adjust the limits, and Microsoft is not publishing them because they may change.
- Users see in the product when a feature will become available again and are often given the option to request a Microsoft 365 Copilot licence.
- In ASPX, the ‘Users Experiencing Usage Limits’ view shows which customers have users hitting the limits, and Microsoft advises informing service desk staff.
Source: Microsoft Partner Center
OpenAI reports that an AI pipeline found 948 working privilege escalation exploits for Linux
On 4 November, OpenAI described a pipeline that used an as yet unreleased, cybersecurity-focused model to find, validate and patch vulnerabilities in the Linux kernel. According to the post, the run took place in mid-October.
- The pipeline produced 2,308 candidate findings, of which 1,724 were dynamically reproduced within 30 hours.
- The result was 948 working local privilege escalation exploits for a widely used Linux distribution and 291 proofs of concept for information leaks.
- The cost came to $1,213,430 in API credits, around $1,279 per exploit.
- Security researchers assess the exploit, patch and severity before reporting to the maintainers; in June, the GPT-5.5-Cyber model found just 24 exploits of this kind.
Source: The Hacker News
Microsoft introduces CSP bundles of Business Central and Copilot Business from $95 per user per month
On 5 November, Microsoft announced two permanent CSP bundles combining Dynamics 365 Business Central with Microsoft 365 Copilot Business, for customers with up to 300 seats. The bundles will appear in the price list preview on 1 December and will be available from 1 January 2027.
- Business Central Essentials with Copilot Business costs $95 per user per month, compared with $101 when purchased separately.
- Business Central Premium with Copilot Business costs $125 per user per month, compared with $131 when purchased separately.
- Each bundle saves $6 per user per month.
- The bundles can be purchased without a Microsoft 365 base subscription, and the prices are list prices in dollars that are subject to change.
Source: Microsoft Partner Center
CrowdStrike introduces an AI Kill Switch that blocks agents’ model access
On 3 November, CrowdStrike introduced the AI Kill Switch in Falcon Guardian, designed to stop AI agents quickly. Security teams activate the feature, after which connected AI gateways block access to the models behind the agents’ decisions.
- Blocking works via the Falcon AI Gateway or via a third-party gateway.
- The Falcon AI Gateway is generally available within Falcon Guardian and, according to CrowdStrike, included at no extra cost.
- The kill switch currently operates at the level of model access.
- Expansion to endpoints, cloud environments, identities, SaaS applications and browser sessions has been announced as ‘coming soon’, and the demo shown is a preview.
Source: CrowdStrike
This article was originally published in Dutch on MSP Business. Read the original →
