Lumen Black Lotus Labs

Headlines · 1

1. 3d
   Security roundup: PoeLLM malware hits 3,400+ servers running LiteLLM and Ollama

   iThome Taiwan's weekly security roundup for October 12–16 reports that the PoeLLM malware is targeting publicly exposed AI and open-source services including LiteLLM and Ollama, with more than 3,400 servers compromised and used for mining as well as further scanning and attacks. Citing Lumen's Black Lotus Labs, the report says samples contained a test endpoint linked to the LiteLLM command-injection flaw CVE-2026-42271, a possible infection route, and that the attackers hid command-and-control addresses in an English poem on GitHub that can be edited to switch victims to a new server. The same roundup notes Taiwan's Financial Supervisory Commission issued a consultation document on agentic AI security for the financial sector covering governance, risk tiering and controls, and that Singapore's CSA warned the Carbonato botnet deploys AI agents on compromised Docker hosts to steal credentials.

   iThome 台湾 · 🔥 0

Experience and discussion from the community

Share my Lumen Black Lotus Labs experienceAsk about Lumen Black Lotus Labs