DevThe Hacker Newsabout 2 hours ago
Langflow and Rails Flaws Exploited in Credential Attacks
1 min read
Threat actors exploit CVE-2026-66066 in Ruby on Rails and Langflow flaws for credential harvesting and C2 activity. VulnCheck recorded 360 detections since August 30, 2026, with traffic from Russia hitting U.K. canaries. Attackers dropped credential harvesters, XMR miners, and SimpleHelp for remote access.
Level
Hype check
Tap to vote and see what everyone thinks.
