Oct 8, 2026 · 3 min · 6 segments
A new malware family called PoeLLM has taken over more than three thousand four hundred exposed AI servers, while SonicWall patches a c-v-s-s ten flaw in its SMA1000 gateways. Plus a utility breach…
Start with the newest target.
A malware family called PoLM has compromised more than thirty thousand four hundred exposed AI and LLM servers.
It drops cryptocurrency miners, and it also recruits each infected host into a growing botnet.
So this isn't a one-off cleanup problem.
Every server it takes becomes a recruiter for the next one.
The reason it works is familiar.
Teams spin up self-hosted model serving stacks fast, often on expensive GPU hardware, and the default posture is frequently no authentication at all.
That puts a powerful, costly machine on the open internet with the door unlocked.
The action is simple.
Confirm that nothing running a model server is reachable from the internet without authentication.
Then look at your GPU hosts for unexplained load because a miner shows up as heat and utilization long before it shows up in a ticket.
Start with the newest target.
A malware family called PoLM has compromised more than thirty thousand four hundred exposed AI and LLM servers.
It drops cryptocurrency miners, and it also recruits each infected host into a growing botnet.
So this isn't a one-off cleanup problem.
Every server it takes becomes a recruiter for the next one.
The reason it works is familiar.
Teams spin up self-hosted model serving stacks fast, often on expensive GPU hardware, and the default posture is frequently no authentication at all.
That puts a powerful, costly machine on the open internet with the door unlocked.
The action is simple.
Confirm that nothing running a model server is reachable from the internet without authentication.
Then look at your GPU hosts for unexplained load because a miner shows up as heat and utilization long before it shows up in a ticket.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.