Agentic AI Exploits Langflow Vulnerability for Ransomware
A threat actor used Agentic AI to conduct a ransomware attack via Langflow, exploiting a critical missing authentication vulnerability, CVE-2025-3248, to access an organization's instance.
Most bot-management vendors publish no price at all. We collected every figure that is actually on the record — DataDome, AWS WAF Bot Control, reCAPTCHA, hCaptcha, Cloudflare and Imperva — plus the four cost traps that sit behind the headline numbers.
A threat actor used Agentic AI to conduct a ransomware attack via Langflow, exploiting a critical missing authentication vulnerability, CVE-2025-3248, to access an organization's instance.
A new phishing-as-a-service platform called ARToken has been discovered, exposing a Microsoft 365 phishing toolkit with capabilities to steal authentication tokens and access Outlook mailboxes.
A European Parliament member's phone was infected with Pegasus spyware twice while investigating its misuse, highlighting the threat to democracy.
A member of the European Parliament's PEGA Committee was infected with Pegasus spyware twice in 2022 and 2023, highlighting the need for stronger measures to prevent spyware abuses.
The UK's National Cyber Action Plan has been delayed amid the Labour leadership crisis, with its publication initially due on Monday, according to multiple sources.
The US has lifted export control restrictions on Anthropic's Fable 5 and Mythos 5 AI models after the company agreed to implement new safety guardrails and classifiers.
Threat actors can hijack Microsoft 365 accounts in 3 seconds using ConsentFix and ClickFix attacks, which exploit routine user actions and workflows.
A 19-year-old alleged member of the Scattered Spider extortion crew was extradited to the US and remains in federal custody awaiting cybercrime charges.
The Department of Homeland Security is reviving a key cybersecurity information sharing effort with critical infrastructure, over a year after the Trump administration shut down the existing Critical Infrastructure Partnership Advisory Council.