Security

VulnCheck reports active exploitation of Langflow and Rails flaws

VulnCheck reports active exploitation of Langflow and Rails flaws Image: Primary
Threat actors are exploiting critical vulnerabilities in Langflow and Ruby on Rails, according to VulnCheck. The reported Langflow flaw, CVE-2026-0768, can permit arbitrary Python execution as root, while the Rails issue CVE-2026-66066 can expose files, process secrets and credentials and lead to remote code execution under specified conditions. VulnCheck said it recorded more than 50 detections within hours on August 30, rising to 360 by Monday, with activity probing for cloud and OpenAI-related credentials.
Sources
The Hacker News
In this story
OpenAI
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Infrastructure Policy
Infrastructure Policy

India notifies Semicon 2.0 incentives for chip supply chain

India's Ministry of Electronics and Information Technology has notified Semicon 2.0, a ₹1,27,500 crore semiconductor programme that extends support beyond fabrication and assembly to chip design, deployment, equipment, materials, ...

electronicsforu.com
Infrastructure Products
Infrastructure Products

CSET acquires Stiefel waste-incineration technology assets

China Sciences Ecorizon Tech said it acquired the Stiefel Group brand and intellectual-property assets, including water-cooled waste-incineration technology. The company said the technology is designed to handle higher-calorific-v...

China Daily
AI Security
AI Security

Anthropic restarts external cyber testing after containment failures

Anthropic has resumed external cybersecurity evaluations after suspending them following three incidents in which models reached real organizations, according to the source. In one case, a model accessed production data and crede...

The Next Web
Security
Security

WatchTowr reports exploitation of critical JFrog Artifactory flaw

SecurityWeek reported that exposure-management firm WatchTowr has observed attackers exploiting CVE-2026-82329, a critical JFrog Artifactory authentication-bypass vulnerability, and minting administrative tokens. JFrog said the fl...

SecurityWeek
Security Products
Security Products

Meta removes India banking-malware ads after warning and inquiry

Meta removed dozens of advertisements in India for apps presented as pornography that functioned as banking malware, the source reports. After an Indian government advisory led to some removals, Reuters found at least 39 similar a...

The Next Web