Weekly Security Roundup: PAN-OS Exploitation, Langflow Attacks and Supply-Chain Threats
Summary
The roundup covers limited exploitation of a PAN-OS flaw, campaigns using phishing and legitimate tools, a reported Schemata data exposure, and emerging techniques including GhostLock and NATS-based C2.
Key points
- Palo Alto Networks said CVE-2026-0300 in PAN-OS was exploited in limited attacks and released initial fixes.
- Strix reported that weak authorization in Schemata exposed records and training materials across tenants; Schemata said it had no evidence of third-party exploitation.
- Reported campaigns used phishing, fake support messages, and deceptive files to deploy malware, steal credentials, or establish remote access.
- A proof-of-concept called GhostLock can indefinitely lock files on SMB shares using standard user access, without deploying ransomware.
- HiddenLayer demonstrated tokenizer tampering that can influence AI model output and tool-call arguments without changing model weights.
- Researchers reported NATS being used for command and control in activity linked to exploitation of Langflow CVE-2026-33017.
Article Details
- Event Type
- Weekly cybersecurity news roundup covering active exploitation, phishing and social engineering, data exposure, malware, supply-chain threats, and security research.
- Impact
- Reported activity includes limited exploitation of a critical PAN-OS vulnerability, Langflow RCE exploitation, credential theft and remote access through phishing and fake IT support, and exposure of cross-tenant data in the Schemata training platform. Other items describe supply-chain attack promotion, ransomware-like file locking, and malware-enabled surveillance and data theft. The article also reports that Schemata had no evidence of third-party access to customer data.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| IPV4 | 159[.]89[.]205[.]184 | IP address at which the operator exploiting Langflow was observed downloading a Python worker and a Go binary. |
MITRE ATT&CK
T1053.005 · Scheduled TaskA ClickFix campaign used scheduled tasks for persistence.T1056.001 · KeyloggingThe Python-based implant in the aid-themed campaign was reported to support keystroke logging.T1059.001 · PowerShellA ClickFix intrusion chain used PowerShell for a command-and-control channel; a separate campaign used a weaponized PowerShell payload.T1068 · Exploitation for Privilege EscalationIn the Teams helpdesk-lure intrusion, the attacker reportedly escalated privileges to SYSTEM using CVE-2023-36036.T1105 · Ingress Tool TransferDuring Langflow exploitation, the operator downloaded a Python worker and a Go binary.T1566.001 · Spearphishing AttachmentSpear-phishing emails with malicious archives were reported in the Operation GriefLure campaign.
CVE
CVE-2023-36036Microsoft · Windows 10 Version 1507; Microsoft · Windows 10 Version 1607; +21 more“The attacker then escalated privileges to SYSTEM using CVE-2023-36036 before deploying a fake Windows lock screen designed to harvest the user’s domain password.” The attackers then moved laterally to a second host,CVE-2026-0300Palo Alto Networks · PAN-OS; Siemens · RUGGEDCOM APE1808Palo Alto Networks patched CVE-2026-0300 after limited exploitation was observed.CVE-2026-33017langflow-ai · langflowThe activity relates to the exploitation of CVE-2026-33017, an unauthenticated remote code execution (RCE) vulnerability in Langflow.
People
Daniel StenbergcURL developer who reported that an Anthropic Mythos scan found one confirmed low-severity vulnerability and several false positives.Kim DvashCreated the GhostLock proof-of-concept demonstrating file locking on SMB-backed shares.Mark ZuckerbergMeta CEO who described the privacy properties of Incognito Chat with Meta AI.
Threat Actors
Operation GriefLureA state-sponsored threat cluster, as described by the article, observed targeting Vietnam's telecommunications sector and the Philippines' healthcare sector with spear-phishing to deploy a remote access trojan.TeamPCPThe article says TeamPCP was recently linked to the compromise of TanStack's npm packages and announced a supply-chain attack competition involving the Shai-Hulud worm.WoodgnatReliaQuest attributed the Teams helpdesk-impersonation activity to KongTuke, which it tracks as a financially motivated initial access broker.
Malware
crpx0Attackers are enticing users seeking “free OnlyFans accounts” to download a seemingly harmless ZIP file that contains the crpx0 ransomware.EarthWormThe company said it has observed the flaw being exploited in limited attacks since at least last month, with unknown threat actors leveraging it to drop payloads like EarthWorm and ReverseSocks5.ModeloRAT#PANOSReverseSocks5The company said it has observed the flaw being exploited in limited attacks since at least last month, with unknown threat actors leveraging it to drop payloads like EarthWorm and ReverseSocks5.Shai-HuludTeamPCP and Breached forum promoted a supply chain attack competition using the Shai-Hulud worm.
Vendors
AnthropiccURL developer Daniel Stenberg said that Anthropic Mythos model’s scan of the utility five “confirmed security vulnerabilities,” out of which one was a low-severity bug, while the rest were false positives.ConnectWisePowerShell payload disguised as a legitimate JPEG image file to deliver a trojanized instance of ConnectWise ScreenConnect to stealthy remote access.MetaMeta has announced Incognito Chat with Meta AI in its namesake app and WhatsApp.MicrosoftThreat actors are sending Microsoft Teams messages from a fake IT Support account to trigger an attack chain that enables remote access, malware deployment, privilege escalation, credential theft, lateral movement, andPalo Alto NetworksThis roundup highlights a wave of active threats, from Palo Alto Networks PAN-OS exploitation and Langflow RCE abuse to phishing-driven intrusions, data exposure, and supply chain abuse.SchemataThe issue affected Schemata, an AI-powered virtual training platform used in military and defense settings.
Products
curlcURL developer Daniel Stenberg said that Anthropic Mythos model’s scan of the utility five “confirmed security vulnerabilities,” out of which one was a low-severity bug, while the rest were false positives.LangflowThis roundup highlights a wave of active threats, from Palo Alto Networks PAN-OS exploitation and Langflow RCE abuse to phishing-driven intrusions, data exposure, and supply chain abuse.Meta AIMeta has announced Incognito Chat with Meta AI in its namesake app and WhatsApp.PAN-OSThis roundup highlights a wave of active threats, from Palo Alto Networks PAN-OS exploitation and Langflow RCE abuse to phishing-driven intrusions, data exposure, and supply chain abuse.SchemataThe issue affected Schemata, an AI-powered virtual training platform used in military and defense settings.ScreenConnectAttackers used spear-phishing and fake files to deliver RATs, infostealers, and ScreenConnect abuse.WhatsAppMeta has announced Incognito Chat with Meta AI in its namesake app and WhatsApp.
Tools
DumpItdomain password.” The attackers then moved laterally to a second host, used legitimate tooling such as DumpIt to gather system memory, and likely exfiltrated the data via an anonymous file-sharing service.GhostLock#PANOSNATS#PANOSpysoxyA new ClickFix campaign carried out via a compromised website has been observed using scheduled tasks for persistence and PySoxy, an open-source Python SOCKS5 proxy, to establish encrypted proxy access.
Countries
Philippinesthreat cluster dubbed Operation GriefLure has been observed targeting Vietnam’s telecom and the Philippines’ healthcare sectors with a RAR archive distributed via spear-phishing emails to deploy a remote accessUnited StatesThe U.S. Federal Communications Commission (FCC) has extended the deadline for owners of banned internet routers to provide security updates to U.S.-based users by two years.VietnamA new state-sponsored threat cluster dubbed Operation GriefLure has been observed targeting Vietnam’s telecom and the Philippines’ healthcare sectors with a RAR archive distributed via spear-phishing emails to deploy a
Industries
Banking and digital paymentsThe goal is to combat cyber-enabled financial fraud and curtail mule accounts across the banking and digital payments ecosystem.DefenseA defense technology company with Department of Defense contracts exposed user records and military training materials through API endpoints that lacked meaningful authorization checks.Healthcarecluster dubbed Operation GriefLure has been observed targeting Vietnam’s telecom and the Philippines’ healthcare sectors with a RAR archive distributed via spear-phishing emails to deploy a remote access trojan on