Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.3), an unauthenticated remote code execution (RCE) vulnerability in Langflow, indicating threat actors are scanning and targeting exposedRead More »Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses when unsuspecting users initiate a transaction. The cryptocurrency clipper activity has been codenamed Silent Swap by McAfee Labs. “The campaign is delivered through unsigned installers – observed in both .NETRead More »Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

The safety check that is supposed to stop an AI coding agent from running a dangerous command can be walked straight past using a shell trick that has been public for decades. New research from Adversa AI, which is named the bypass GuardFall, found it works against ten of the elevenRead More »GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks

Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In many cases, the path in was visible just by watching what the app sent: a plaintext API key, a reusable token, or a backend serverRead More »282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

A recent report by Filigran analyzes the gap between threat visibility and threat management.