Wiz says AI agents ran multi-cloud intrusions end to end
One confirmed entry was Java remote code execution in an exposed Kafka UI, followed by malware and command-and-control.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #kafka
CVE-2026-86792: Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration
Apache Airflow Kafka provider 1.15.0 before 2.0.0 resolves unvalidated dotted-path strings into Python callables, enabling Scheduler RCE.