60
Sophos fixed critical vulnerabilities in its Firewall product
60
60
Hackers Target Langflow in CVE-2026
Threat actors are actively exploiting CVE-2026-0768, an unauthenticated Python RCE in Langflow, hunting OpenAI, AWS, and SSH credentials.
Attackers began exploiting CVE-2026-0768 (CVSS 9.8), an unauthenticated remote code execution flaw in the code validator of the Langflow AI low-code platform, affecting all versions up to 1.4.2. VulnCheck observed 50+ Canary detections on the first day of exploitation, with attackers checking Langflow, OpenAI, and AWS keys in environment variables, reading the secret key, and looking for SSH access and shell history; most traffic originates from Russia and targeted UK-based canaries. The flaw was reported via ZDI by Trend Research in July 2025 and disclosed in January 2026; six other Langflow CVEs were added to VulnCheck's KEV list this year.
72
60
60
60
60
Network Security Trends: August
60
60
60
60
60
Microsoft Finds Critical Bugs in Pre-Installed Apps on Millions of Android Devices
60
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
60
60
60
60
60
60
March 2021 Patch Tuesday: Microsoft fixes yet another actively exploited IE zero-day
60
Network Attack Trends: February
60
Vulnerability Spotlight: Vulnerabilities in Lansweeper could lead to JavaScript, SQL injections
60
60
60
60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]
60
60
60
60
Hackers Use Autonomous AI Agents to Harvest Thousands of Credentials in Under 6 Hours
Google Cloud documents a financially motivated actor using autonomous AI agents on a compromised cloud tenant to harvest 23,800+ credentials in under six hours.
Google Cloud reports that an attacker compromised a victim's cloud environment and deployed a multi-agent framework driven by preconfigured Markdown playbooks to autonomously handle vulnerability scanning, credential collection, error troubleshooting, and IP rotation. An exposed command-and-control server hosted the 'Recon' framework with a live dashboard managing over 23,800 harvested secrets, including cloud and AI-service API keys. The report also ties DUSTMAKER to UNC6780/TeamPCP, targeting AI development tools and CI/CD systems via trojanized MCP packages such as tiktoken_mcp. Google has disabled linked assets and updated protections after the actors' operational security failures.
72
CISA adds Log4Shell flaw to the Known Exploited Vulnerabilities Catalog
60
CISA adds 3 new bugs to Known Exploited Vulnerabilities Catalog
60
60
60
60
60
60
60
Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation
60