US and Canadian Cyber Agencies Warn Organizations to Get a Handle on AI Token Usage
CISA, together with the Canadian Centre for Cyber Security and other partners, has released joint guidance aimed at helping organizations track and control how much they spend on tokens when using outside AI (described as 'super intelligence') services. The agencies point out that letting token usage run unchecked can drive up costs unpredictably, slow or interrupt service, and leave systems vulnerable to attacks designed to drain a victim's token budget or wallet. To counter this, the guidance lays out steps covering how tokens get allocated, how workflows are built for efficiency, how prompts are written, how caching and reused context can cut waste, how data is trimmed before it's sent to a model, and how usage should be tracked over time.