Tag
#MuddyWater
2 stories taggedMuddyWater.
AI Security
Langflow's Unauthenticated File-Write Flaw Is Being Exploited — Patch Dropped 73 Days Ago
CVE-2026-5027 lets attackers write files to arbitrary paths on exposed servers, and because Langflow ships with login disabled by default, exploitation requires exactly zero credentials.
3 min read
Threat Intelligence
MuddyWater Targets Global Organizations with DLL Side-Loading
Symantec and Carbon Black tie an Iranian espionage campaign to at least nine organizations across nine countries in early 2026.
2 min read