The CISA deadline has passed. Organizations still running IBM Langflow are now in active-exploitation territory — and the ...

Federal agencies have until August 7, 2026, to remediate or disconnect assets affected by a critical vulnerability in IBM Langflow, tracked as CVE-2026-9198. This mandate follows the inclusion of the ...

CISA warns that three vulnerabilities in IBM Langflow OSS, N-able N-central, and Apache Tomcat have been exploited in the ...

A quiet Saturday night in Honolulu turned into something out of a reptile handler's day job on July 25, when a local couple found a roughly three-foot ball python calmly curled up under their front ...

The US cyber watchdog is alerting federal agencies and other users to the active exploitation of a Langflow critical vulnerability. Langlow is a self-hosted, open-source low-code (drag-and-drop) tool ...

AI agent security now has a purpose-built open-source guardrail: Ant Group released SingGuard-NSFA, a free framework that catches prompt injection and credential-theft patterns before AI agents ...

Cloud security company Sysdig Inc. has documented what it says is the first ransomware operation carried out from start to finish by an autonomous artificial intelligence agent, a campaign it calls ...

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to weaponize ...

Your AI agent did exactly what it was designed to do. The framework underneath it just handed an attacker a shell on the box that holds your OpenAI key, your database credentials, and your CRM tokens.

If you’re building AI agents with Langflow, here’s your wake-up call. Roughly 7,000 publicly exposed Langflow server instances are actively being targeted by attackers exploiting a chain of critical ...