China's AI Hacked This CVE Autonomously — Inside the DeepSeek Remote Code Execution Campaign

This week on IT SPARC Cast – CVE of the Week, John and Lou cover three newly exploited vulnerabilities affecting Langflow, Apache Tomcat, and N-able N-central. While each vulnerability is serious on its own, the bigger story is how attackers are increasingly using AI to identify targets, automate reconnaissance, and accelerate attacks.The discussion also explores recent research showing threat actors using AI to prioritize targets, why network anomaly detection is becoming more important than ever, and why organizations can no longer afford to wait for monthly patch cycles. If you’re responsible for enterprise IT, this episode highlights why continuous patching and AI-assisted defense are quickly becoming necessities.⸻📄 Show Notes🚨 CVE of the WeekThis week we’re covering three newly exploited vulnerabilities that every enterprise IT team should know about.Langflow (CVE-2026-9198 | CVSS 9.8)A critical unauthenticated remote code execution vulnerability affecting default Langflow deployments. Particularly concerning because Langflow is widely used for building AI workflows and agent-based applications.Fixed in: Langflow 1.10.1⸻Apache Tomcat (CVE-2026-34486 | CVSS 7.5)A vulnerability affecting encrypted cluster communication in Apache Tomcat. Successful exploitation can expose sensitive cluster traffic and weaken security in highly available enterprise deployments.Patched in:Tomcat 11.0.21Tomcat 10.1.54Tomcat 9.0.117⸻N-able N-central (CVE-2026-18556 & CVE-2026-18577)An authentication bypass vulnerability followed by a second patch after the original fix proved incomplete. Both vulnerabilities are now considered actively exploited.⸻🤖 AI Is Changing the Threat LandscapeResearchers observed attackers using AI to help identify and prioritize targets before launching attacks.The takeaway isn’t simply that AI is being used—it’s that attackers are becoming faster and more efficient.John and Lou discuss why defenders must respond with:AI-assisted security toolsNetwork anomaly detectionContinuous monitoringFaster patch deploymentThe only practical way to keep pace with AI-assisted attacks is to use AI as part of your defense strategy.⸻🛠️ Recommended ActionsPatch Langflow, Tomcat, and N-central immediately.Inventory your environment for unauthorized Tomcat deployments.Enable continuous vulnerability monitoring.Deploy network anomaly detection where possible.Move toward continuous patching rather than monthly maintenance windows.Review AI security policies and detection capabilities.⸻💬 Mail BagListener BJ appreciated that last week’s episode focused on the enterprise impact of OpenWRT instead of treating it as simply another home router vulnerability.John and Lou discuss why many open-source technologies quietly power enterprise infrastructure—and why understanding those hidden dependencies is becoming increasingly important.⸻📣 Wrap UpHow is your organization preparing for AI-assisted cyberattacks? Is continuous patching part of your strategy?📧 [email protected] IT SPARC CastIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn Hosted on Acast. See acast.com/privacy for more information.