Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.
Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.