Attackers are exploiting CVE-2026-48558, an authentication bypass in SimpleHelp RMM, to drop the Djinn Stealer malware on victim computers.

A critical vulnerability (CVE-2025-3248) in Langflow, a web application for building AI-driven agents, is being exploited by attackers.