New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack
Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator first documented earlier this…
Tag: Nacos
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites
A cybercrime crew left its server exposed for three weeks, revealing the inner workings of a mass site-hacking operation tracked as WP-SHELLSTORM.…
AI Agent JADEPUFFER Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig has identified what it believes is the first ransomware attack fully orchestrated by an AI agent, dubbed JADEPUFFER. The…
CVE-2021-29441: Nacos Authentication Bypass
An old vulnerability in Nacos configuration server allowing authentication bypass by faking a web header. Used by WP-SHELLSTORM in an earlier campaign…
Nacos: Alibaba’s Configuration Server
Nacos is Alibaba's configuration server targeted in the prior JADEPUFFER campaign for credential harvesting.