AI Weekly Malaysia

Lumen Black Lotus Labs detailed a campaign it calls Canto Incognito, where malware codenamed PoeLLM has infected more than 3,400 internet-facing servers since April 2026 to install XMRig and Iron cryptocurrency miners and connect victims to the Kryptex mining service. Targets are mostly AI/LLM infrastructure and dev tooling — LiteLLM, Gotenberg, Gitea, and Ivanti Sentry appliances — and the C2 address is hidden inside a poem hosted in a GitHub repository (github.com/ejejejdfbbebe, first commit April 13, 2026), with a few words swapped each time a new C2 is set up. Peak activity was mid-June 2026 at nearly 2,200 affected servers with about 800 active per day, concentrated in the U.S. and Western Europe; compromised hosts are reused as scanners and exploit servers, and recent traffic suggests experimentation with distributed SSH brute-force.

Why: If you self-host LiteLLM, Gotenberg, Gitea, or similar tooling on a public IP, this is the concrete failure mode: your GPU/CPU gets rented out for someone else's Monero mining and your box becomes a scanner for the next victim. Decide this week whether your LLM gateway is reachable from the open internet at all, and whether it sits behind auth, a VPN, or an allowlist — the article shows exploitation of exposed deployments, not a patchable CVE. The poem-based C2 also means static blocklists of C2 domains will not help; detection has to look at outbound mining-pool traffic and unexpected outbound connections.

Mistral launched a public preview of Mistral Large 4 (unofficially ML4, 'le Chonk'), a 1-trillion-parameter natively multimodal model with 49B active parameters, available today via the Mistral Studio API; weights are promised by the end of October 2026. It was trained from scratch on 3,800 NVIDIA Grace Blackwell GPUs in Mistral's own European datacenters, and the preview runs on that same infrastructure. Mistral claims state-of-the-art open-model performance in cybersecurity, finance, and law, plus visual grounding beyond frontier closed models, while red-teaming with cybersecurity leaders, vetted partners, and state authorities before weight release.

Why: Builders should test the Mistral Studio preview now if they need coding, agentic, or multimodal capabilities, but treat the benchmark claims as vendor-reported until independent evals exist; do not plan a production migration on 'weights drop end of month' alone. For teams with data-residency or provider-refusal constraints, the European-hosted preview and promised self-deployable weights are the concrete decision points—especially if cyber or incident-response access matters.

Mistral unveiled Mistral Large 4 (ML4), nicknamed "le Chonk," a 1-trillion-parameter model it claims is the most capable open model outside China, calling it particularly strong at cyber, coding, manufacturing, finance and multimodal tasks. The CNBC report frames this as Western developers racing to close the capability gap with Chinese open-weight models, and notes Mistral raised a 3 billion euro ($3.4 billion) Series D in September at a 21 billion euro valuation. The article contains no benchmark numbers, license terms, weight-release date, pricing, or hardware requirements.

Why: There is nothing here you can act on yet: no license, no benchmarks, no pricing, no hardware specs for a 1T-parameter model. If you are picking open weights for a product, the deciding details — can it be self-hosted, what licence governs commercial use, will quantized/distilled variants exist — are all absent from this report, so treat the 'most capable open model outside China' line as a vendor claim until numbers or weights appear. Worth watching only if you specifically need a non-Chinese open-weight option for compliance or data-residency reasons.

TII (Abu Dhabi) released Falcon-ASR, a 1.6B-parameter speech recognition model focused on Arabic with a stated emphasis on the Emirati dialect, plus English, French, Spanish and Portuguese. It reports 20.92% average WER and 8.79% CER across six Arabic test sets on the Open Universal Arabic ASR Leaderboard protocol, versus the best published snapshot figure of 23.17% (Audar-ASR-V1-Turbo, 2.35B params), and says it recorded the lowest word and character error rates among compared systems on an internal Emirati evaluation. It also outputs word-level timestamps and is available via a Hugging Face demo.

Why: The headline number is a 2.25-point WER improvement over the previous best leaderboard entry, but 20.92% still means roughly one in five words wrong on average Arabic test sets — fine for search or summarisation over audio, risky for verbatim transcripts, subtitles, or anything a user will read word-for-word. Competitor figures come from a 30 September 2026 leaderboard snapshot and the Emirati comparison is TII's own internal eval with no competitor numbers published, so if you are picking an ASR vendor for Arabic you should re-run your own audio rather than trust the table. The 1.6B size and open weights are the practical part: it is small enough to self-host next to your app if you would otherwise pay per-minute cloud ASR for Arabic, English, French, Spanish or Portuguese.