VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_88543f91771f26b0c498bc895abd722e

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens

Published Jul 17, 2026

A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys.

A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio: the image generators, local model runners, and workflow builders that teams stand up fast and firewall late.

The intel feed behind that counter

Affected AI Products

langflow ollama
Get the weekly digest. Every Monday: top AI security stories of the week. Free.