The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting n8n to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability, tracked as CVE-2025-68613 (CVSS score: 9.9), concerns a case of expression injection that leads to remote code execution.Read More »CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed

Poland’s National Centre for Nuclear Research defended against a cyberattack. 

Agentic web browsers that leverage artificial intelligence (AI) capabilities to autonomously execute actions across multiple websites on behalf of a user could be trained and tricked into falling prey to phishing and scam traps. The attack, at its core, takes advantage of AI browsers’ tendency to reason their actions andRead More »Researchers Trick Perplexity’s Comet AI Browser Into Phishing Scam in Under Four Minutes

A hacktivist group with links to Iran’s intelligence agencies is claiming responsibility for a data-wiping attack against Stryker, a global medical technology company based in Michigan. News reports out of Ireland, Stryker’s largest hub outside of the United States, said the company sent home more than 5,000 workers there today.Read More »Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

Stryker, a major U.S. medical technology organization, has been disrupted by a cyberattack. 

Cybersecurity researchers have disclosed details of two now-patched security flaws in the n8n workflow automation platform, including two critical bugs that could result in arbitrary command execution. The vulnerabilities are listed below – CVE-2026-27577 (CVSS score: 9.4) – Expression sandbox escape leading to remote code execution (RCE) CVE-2026-27493 (CVSS score:Read More »Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials