SecurityWeek

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

CISA warns that three vulnerabilities in IBM Langflow OSS, N-able N-central, and Apache Tomcat have been exploited in the ...

New ransomware targets AI model weights and can't even collect the ransom

A new ransomware strain scans specifically for AI model weights, and it has no way to collect a ransom, leaving victims ...
Dark Reading

Hackers Exploit Critical Langflow Flaw to Unleash Flodrix Botnet

Attackers are actively targeting a critical flaw in a popular Python-based Web app for building AI agents and workflows to unleash a powerful botnet that can cause full system compromise, distributed ...
Cybernews

Critical Langflow vulnerability fully opens doors to hackers and is under active exploitation

The US cyber watchdog is alerting federal agencies and other users to the active exploitation of a Langflow critical ...
Dark Reading

'Easily Exploitable' Langflow Vulnerability Requires Immediate Patching

A critical flaw found in the open source Langflow platform was added to the US Cybersecurity and Infrastructure Security Agency’s (CISA's) Known Exploited Vulnerabilities (KEV) catalog. Langflow is a ...
latesthackingnews.com

ENCFORGE Ransomware Targets AI Models After Langflow RCE Exploit

An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known ...
CSOonline

Langflow RCE under active attack months after a patch was shipped

Actively exploited CVE-2026-5027 lets attackers write files to arbitrary locations on vulnerable Langflow servers, creating a path to remote code execution and full system compromise. Enterprises ...