Seychelles (Country): news timeline & CVEs

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Honeypots recorded 1,423 attempts exploiting Langflow's critical authenticated RCE, CVE-2026-105740.

Previdian reports active exploitation of CVE-2026-105740, a CVSS 9.9 authenticated remote-code-execution flaw in Langflow versions before 1.9.0. Any logged-in user can store an MCP stdio command that Langflow passes unsandboxed to bash, with environment-variable injection also possible. Since September 19, 2026, its honeypots recorded 1,423 attempts from 27 IP addresses, including common-password logins and theft of Langflow secrets. Langflow, owned by IBM via DataStax, also patched related CVE-2026-105697.

The Hacker NewsOct 15, 07:07 UTC · 1d agoExploit / PoC in the wildCVE-2026-105740 CVE-2026-105697 CVE-2026-69255+3 CVEs4· 1 read

‘Jonathan’ Is the Oldest Land Animal on Earth. He Could Hold the Secrets to Defying Death

Scientists sequenced Jonathan, a roughly 194-year-old Aldabra tortoise, to study extreme longevity.

A Science Advances study reports the first genome sequence of Jonathan, an Aldabra giant tortoise thought to be about 194 years old. Researchers compared cheek swabs with other tortoises and found variants in DNA repair, insulin regulation, mitochondrial function, telomeres, and autophagy, plus an unusually low-entropy mitochondrial methylome. The work is longevity biology, not cybersecurity or AI.

404 MediaOct 7, 18:00 UTC · 9d agoOther

The Domains Keep Disappearing, but the Malware Infrastructure Behind Them Never Moves

ActiveSOC found fake-CAPTCHA malware lures rotating domains while Seychelles hosting infrastructure stayed put.

Over five months ActiveSOC tracked four attack chains that began on the same Seychelles-registered hosting network, AS202412, while lure domains, downloads, and command servers changed. Most victims reached fake CAPTCHA pages through ads, and one arrived via an emailed link; the pages copied a command for the Windows Run dialog. Reviewing about 150 alerts, analysts found four cases reached command execution, including a reboot-persistent stealer and a Node.js implant active for nearly two days. One implant retrieved its command server through a blockchain lookup rather than a conventional domain.

Cyber Security NewsSep 23, 11:53 UTC · 23d agoMalware in the wild1· 1 read

Seychelles

Timeline3 articles

Related CVEsby mentions

Appears with

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

‘Jonathan’ Is the Oldest Land Animal on Earth. He Could Hold the Secrets to Defying Death

The Domains Keep Disappearing, but the Malware Infrastructure Behind Them Never Moves