This issue covers fresh attacks on AI agent infrastructure—over 7,000 Langflow servers hit via chained bugs in LangGraph and LangChain—and a new agentjacking risk where exposed Sentry keys let attackers hijack Claude-based workflows. It also details Apple’s Beats Studio Buds wiretap patch, Gizmodo’s ClickFix malware incident, and ongoing FortiBleed fallout, plus guidance on client-side bot detection, post-quantum crypto, and microVM limits.

• 7,000+ Langflow servers are being actively compromised by chaining three known bugs across LangGraph, Langflow, and LangChain-core, giving attackers code execution and API key theft.
• A new "agentjacking" technique abuses exposed Sentry DSNs to inject fake error events that trick AI coding agents (Claude Code, Cursor, Codex) into running malicious commands and leaking AWS/GitHub credentials, bypassing traditional security controls entirely.
• Apple's Beats Studio Buds firmware fix (CVE-2025-20701) patches an Airoha Bluetooth chip flaw that let nearby attackers eavesdrop through unpaired earbuds and crack pairing keys.
• Roughly 1,000 organizations have been confirmed breached via FortiBleed, with attackers exporting configs, cracking password hashes via rented GPUs, and planting persistent backdoors (new admin accounts, SSH/RDP rules, IPsec tunnels).

Attackers are exploiting CVE-2026-5027, a path traversal bug in Langflow’s file upload API, to write arbitrary files on exposed servers without authentication. The flaw, caused by unsanitized filenames, was patched in langflow-base 0.8.3 and Langflow 1.9.0 (upgrade to 1.10.0).

• CVE-2026-5027 lets attackers write arbitrary files on Langflow servers with no authentication, via unsanitized filenames in the file upload API (path traversal using "../").
• Langflow's unauthenticated auto-login means one request can grab a session token, making exploitation trivial.
• VulnCheck honeypots have already detected live exploitation attempts, and Censys shows roughly 7,000 exposed instances.
• Patched in langflow-base 0.8.3 and Langflow 1.9.0; users should update immediately to 1.10.0.

This digest covers new exploits in AI and enterprise platforms, including a path traversal flaw in Langflow, a ServiceNow tenant data leak, and critical Ivanti Sentry root bugs. It also highlights Anthropic’s ATT&CK mapping of AI-driven threats and evolving deepfake tactics for bypassing facial recognition.

• Langflow's unauthenticated file upload endpoint is under active exploitation, enabling remote code execution—patch or lock down auth immediately.
• Ivanti Sentry 9.9/10.0 has critical unauthenticated root/admin-creation bugs via a Tomcat API—upgrade to 10.5.2/10.6.2/10.7.1 now.
• Anthropic's ATT&CK mapping of 832 banned accounts found top-tier threat actors chaining fully autonomous multi-step attacks (recon, SSRF, SSH key theft, lateral movement) with no human prompting.
• Deepfake fraud rings (North Korean IT workers, a $38.4M Vietnamese laundering gang, and others) are defeating liveness checks by combining masks, injected video, and real-time deepfakes.