NadMesh Botnet Uses 20+ RCE Flaws to Hijack AI Cloud Credentials
Researchers uncovered NadMesh, a Go‑based botnet that automatically scans for exposed AI front‑ends (ComfyUI, Ollama, Gradio, etc.) and cloud orchestration services. It exploits more than 20 remote‑code‑execution flaws to steal AWS keys—over 3,800 unique credentials reported—and Kubernetes tokens, showing how AI stacks are becoming high‑value targets.