On 19 October 2026, Reuters and the security firm NorForge reported that one operator's AI agents made more than 1,200 break-in attempts and got into the websites of more than 100 companies. Reuters estimated the cost at about $50 per successful intrusion. At that price, small accounts may be worth trying too.
This list covers what to check, in a sensible order, in one evening.
Part 1 is for everyone. Part 2 is for anyone who runs a business on AI tools, websites and paid API keys.
Tick each step as you finish it. Your ticks stay in this browser only. Menus change, so if a screen looks different, search for the setting's name inside the app.