TECH NEWS

Hackers Start Exploiting Critical Langflow Vulnerability

Threat actors have started exploiting a critical-severity remote code execution (RCE) vulnerability in the AI low-code platform Langflow, vulnerability intelligence firm VulnCheck warns.

Tracked as CVE-2026-0768 (CVSS score of 9.8), the security defect exists within the code validator in Langflow’s custom component editor.

Because a user-supplied string is not properly validated before it is used for Python code execution, an attacker could exploit the bug to execute arbitrary code as root without authentication.

The security flaw was reported through ZDI in July 2025 and was publicly disclosed as a zero-day in January 2026. All Langflow releases up to version 1.4.2 are affected.

According to VulnCheck, threat actors have been exploiting the vulnerability to perform reconnaissance and credential harvesting operations.

The cybersecurity firm observedqueries for environment variables, secret keys, and SSH access, mainly originating from Russia. By Monday, VulnCheck had seen over 360 exploitation attempts hitting its canaries in the...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

https://images.hothardware.com/contentimages/newsitem/71519/content/16x9_2133x1200_highres-samsung-galaxy-book6.jpg

Samsung Drops $799 Galaxy Book6 To Bring AI PCs To The Masses

Samsung is expanding its Galaxy Book6 laptop line with a more affordable 14-inch variant designed to bring AI features and capabilities to a wider audience. Starting at $799.99, the new entry-level model trades the higher-end Core Ultra Series 3 silicon based on Panther Lake found in its flagship siblings

https://www.cnet.com/wp-content/uploads/sites/2/d521feeb-dc45-418d-b88a-dadbf3ff02fe.jpg

5 Reasons a VPN Should Be on Your Back-to-School Shopping List

Whether you’re heading off to university for the first time or starting a new academic year, back-to-school season usually means shopping for new gear. Just don’t forget to put a virtual private network, or VPN, on that list. Students have become increasingly attractive targets for cybercriminals because of

https://platform.theverge.com/wp-content/uploads/sites/2/2026/08/poco-f9-pro-ultra-4.jpg?quality=90&strip=all&crop=0%2C10.727971269358%2C100%2C78.544057461284&w=1200

Poco’s F9 Ultra pairs an ultra-bright display with a glowing Bose subwoofer

Xiaomi spinoff brand Poco has partnered with Bose for the second year in a row for its flagship F9 Pro and Ultra phones. The F9 phones double down on amped up audio, with a light-up subwoofer built into the Ultra, along with extremely bright displays, enormous batteries, and what should

https://image.theregister.com/5238831.jpg?imageId=5238831&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

The Gentlemen come calling as Nutex confirms sensitive data theft

Ransomware crew threatens publication while healthcare biz assesses which records escaped US hospital operator Nutex Health says attackers stole private or confidential patient, employee, provider, business, and financial information during the cyberattack it disclosed last week. In an updated filing submitted to the Securities and Exchange Commission (SEC) on Monday,

Read more

Samsung Drops $799 Galaxy Book6 To Bring AI PCs To The Masses

5 Reasons a VPN Should Be on Your Back-to-School Shopping List

Poco’s F9 Ultra pairs an ultra-bright display with a glowing Bose subwoofer

The Gentlemen come calling as Nutex confirms sensitive data theft