CVE-2025-3248

• New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

  New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier this month. The same operator has now been spotted deployin

• New Avalon Malware Framework Packs CrownX Ransomware Capabilities

  New Avalon Malware Framework Packs CrownX Ransomware Capabilities Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security

• From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

  From Langflow to Monero: Inside CVE-2026-33017 Cryptominer We tracked a cryptocurrency-mining campaign exploiting CVE-2026-33017, which revealed how threat actors are now scanning exposed AI application infrastructure for their next foothold. From Langflow to Monero: Inside CVE

• CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

  CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnera

• 13th July – Threat Intelligence Report

  13th July – Threat Intelligence Report For the latest discoveries in cyber research for the week of 13th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES U.S. auto insurer AssuranceAmerica has disclosed a data breach affecting approximately 7 mill

All reports →

• CISA KEV CVE-2025-3248cisa-kevrelated_to
• EPSS CVE-2025-3248epss-recordscored_by

• Connector · intel_report_ingest5