credential harvesting news
2 stories
infostealerhigh
Armored Likho Hits Government, Energy Sectors With BusySnake Stealer
A newly identified threat actor, referred to as Armored Likho, is actively targeting organizations within the government and energy sectors across Russia, Kazakhstan, and Brazil. Researchers have observed a sophisticated phishing campaign orchestrated by this group, which leverages a custom-developed information-stealing malware.
CVE-2026-55255critical
Attackers using Langflow flaw for credential harvesting (CVE-2026-55255)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in the Langflow AI framework to its Known Exploited Vulnerabilities catalog. This flaw, identified as CVE-2026-55255, has been observed being actively exploited in the wild by threat actors.