CISA, Canada's Cyber Centre and partners publish joint guidance on managing AI token consumption, warning that unmanaged usage can lead to token exhaustion and 'denial-of-tokens' or 'denial-of-wallet' attacks (ITSM.00.125, 22 Oct)
CISA said on 22 October 2026 that it, the Canadian Centre for Cyber Security (Cyber Centre) and partners are releasing joint guidance, Managing AI Token Consumption for Operational Resilience, to help organisations understand and manage token usage. CISA says unmanaged token consumption may contribute to rising and unpredictable costs, reduced service availability, degraded performance, token exhaustion, and denial-of-tokens or denial-of-wallet attacks. The Cyber Centre's version (ITSM.00.125) describes a denial-of-tokens attack as threat actors deliberately generating excessive AI usage to exhaust token allocations, consume budgets or trigger rate limits, and a denial-of-wallet attack as exploiting usage-based pricing to cause financial harm, for example with complex prompts or AI loops. The authoring agencies recommend a tiered model that ranks token allocation by business impact, with cyber defence, incident response and threat intelligence in the mission-critical tier, and risk assessments before letting AI agents operate autonomously. They also recommend monitoring unusual increases in token consumption as a potential indicator of data exfiltration, feeding AI token telemetry into a SIEM alongside identity, cloud and API logs, progressive usage alerts (the guide's example: 70%, 80% and 90% of quota), multi-provider architectures, and planning for reduced AI availability in critical infrastructure, including keeping non-AI and manual capabilities. Sources: CISA (22 Oct 2026); Canadian Centre for Cyber Security ITSM.00.125 (October 2026).
- Product
- Organisations using third-party AI / LLM services billed by tokens (guidance)
- Versions
- n/a — guidance (published 22 Oct 2026)
- Exploited in Australia?
- unknown
- Patch to
- Map which business and critical functions depend on AI services; set token allocations by priority tier and progressive usage alerts; feed AI token telemetry into your SIEM and watch for unusual spikes; cap output length and bound agentic loops; assess AI providers for quota limits and reliability, and keep non-AI fallbacks for critical work.
Primary: CISA — Managing AI Token Consumption for Operational Resilience (22 Oct 2026) · Vendor: Canadian Centre for Cyber Security — Managing AI token consumption for operational resilience (ITSM.00.125, October 2026)