Cybersecurity News
Filters
Filtered by tag: honeypot × Clear
A Hacker Tried to Turn an AI Chatbot Into a Tool for Attacking Other Servers
Matched: Artificial Intelligence
A honeypot investigation by Sekoia found an attacker attempting to weaponize Flowise, an open-source AI workflow platform, to attack other servers. The intruder queried credentials, tried creating malicious workflows with outbound HTTP requests, and sent prompt injection attempts to extract data and conduct reconnaissance. Prompts referenced an online gambling platform linked to Asia, suggesting a Chinese-speaking operator. No real systems were compromised, as the honeypot ran no live model or commands.
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Matched: Agentic, Artificial Intelligence
A critical remote code execution flaw in Langflow (CVE-2026-105740, CVSS 9.9) is being actively exploited, with 1,423 attempts recorded across honeypots. The vulnerability affects the open-source AI workflow platform, now owned by IBM following its acquisition of parent company DataStax in February 2025. Security firm Previdian issued an alert urging users to patch immediately.