/
data_types_exposed:credentials × has_exploit:true × cves:CVE-2024-31621 × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · exploit público medium

Opportunistic attacker probes Flowise honeypot for credentials, hijacks workflows and uses LLM prompts for iGaming recon

Sekoia observed an attacker interacting with an exposed Flowise AI orchestration honeypot (emulating version 2.2.8) in late August 2026. The operator enumerated chatflows and stored credentials, tried to create a rogue workflow, and used prompt injection to turn the agent into an offensive analysis assistant. Sekoia assesses the activity …

CVE-2024-31621 CVE-2025-59528 CVE-2026-41264 gambling technology
sekoia.com · exploit público medium

Chinese-speaking actor abuses unauthenticated Flowise honeypot to steal secrets and use its LLM agent against a gambling network's Nightingale server

In late August 2026, Sekoia's TDR team observed an attacker compromise an unauthenticated Flowise honeypot (emulating v2.2.8). The attacker harvested stored credentials, tried to plant a malicious chatflow with a callback to 154.217.251.226, and used prompt injection to turn the LLM agent into an offensive analysis assistant. The activity…

CVE-2025-59528 CVE-2026-41264 CVE-2024-31621 gambling ai_platforms