news.mlab.sh
2 results
threat-intel

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens

A Go botnet called NadMesh is actively targeting exposed AI services and cloud infrastructure, specifically seeking AWS keys, Kubernetes tokens, and Docker API access. The botnet, discovered by XLab and previously identified by Censys, uses a sophisticated scanning and exploitation strategy, leveraging tools like MCP t…

The Hacker News · Jul 17, 2026 High