Unit 42Andy Piazza
Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks
Part of the CVE-2026-33017 story · since 20 Mar
Quiet for 13 weekslast report 30 Jul8 articles7 outlets
- Fri 20 Mar, 08:45 UTC. SecurityWeek, first report. Critical Langflow Vulnerability Exploited Hours After Public Disclosure. Cites a CVE in CISA KEV.
- Fri 20 Mar, 10:47 UTC. Infosecurity, its first report on the story. Hackers Exploit Critical Langflow Bug in Just 20 Hours. Cites a CVE in CISA KEV.
- Fri 20 Mar, 16:24 UTC. The Hacker News, its first report on the story. Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure. Cites a CVE in CISA KEV.
- Thu 26 Mar, 19:48 UTC. Dark Reading, its first report on the story. Critical Flaw in Langflow AI Platform Under Attack. Cites a CVE in CISA KEV.
- Thu 26 Mar, 22:02 UTC. Security Affairs, its first report on the story. U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
- Fri 27 Mar, 10:59 UTC. Security Affairs. U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
- Sat 27 Jun, 02:46 UTC. SecurityOnline, its first report on the story. Langflow CVE-2026-33017 flaw leveraged to deploy cryptominer. Cites a CVE in CISA KEV.
- Thu 30 Jul, 10:32 UTC. Unit 42, its first report on the story. Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks. Cites a CVE in CISA KEV. This article, 8th of 8.
Unit 42 has uncovered an AI-driven autonomous hacking campaign by a Chinese-speaking actor who utilized AI models for cyberattacks. The actor used various tools, including the DeepSeek framework operating via the Hermes Agent, to target infrastructure vulnerabilities, autonomously enumerating targets and sourcing exploit tools. Key findings include:
- The threat actor operated under aliases and leveraged multiple vulnerabilities for attacks.
- Autonomy in attack execution allowed for autonomous scanning and manipulation without human input.
- Limited interaction with Western AI models like Claude Code and Codex, indicating a preference for native solutions due to operational efficiencies.
- Manual oversight and human intervention were also part of the campaign, confirming ongoing evaluation and adaptability in their methods.
- Despite several attempts at exploitation, the overall success rate was limited, indicating operational security awareness by the threat actor.
Notable identified CVEs included CVE-2026-33017 (Langflow) and a combination exploit targeting n8n (CVE-2026-21858 and CVE-2025-68613). The report emphasizes the emerging threat of AI-enabled attacks and the need for organizations to enhance protective measures using products like Cortex XDR, Cortex XSIAM, and Next-Generation Firewall.
How the story developed
Quiet for 13 weekslast report 30 Jul8 articles7 outlets
8 articles from 7 outlets since 20 Mar. Quiet since 30 Jul. This was the 8th report, 132 days after the first.
- Fri 20 Mar, 08:45 UTC. SecurityWeek, first report. Critical Langflow Vulnerability Exploited Hours After Public Disclosure. Cites a CVE in CISA KEV.
- Fri 20 Mar, 10:47 UTC. Infosecurity, its first report on the story. Hackers Exploit Critical Langflow Bug in Just 20 Hours. Cites a CVE in CISA KEV.
- Fri 20 Mar, 16:24 UTC. The Hacker News, its first report on the story. Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure. Cites a CVE in CISA KEV.
- Thu 26 Mar, 19:48 UTC. Dark Reading, its first report on the story. Critical Flaw in Langflow AI Platform Under Attack. Cites a CVE in CISA KEV.
- Thu 26 Mar, 22:02 UTC. Security Affairs, its first report on the story. U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
- Fri 27 Mar, 10:59 UTC. Security Affairs. U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
- Sat 27 Jun, 02:46 UTC. SecurityOnline, its first report on the story. Langflow CVE-2026-33017 flaw leveraged to deploy cryptominer. Cites a CVE in CISA KEV.
- Thu 30 Jul, 10:32 UTC. Unit 42, its first report on the story. Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks. Cites a CVE in CISA KEV. This article, 8th of 8.
- Known exploited CVE
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 8 articles as a listHide the list
- Fri 20 MarDay 03
- Critical Langflow Vulnerability Exploited Hours After Public Disclosure08:45 · SecurityWeek · First report · Exploited CVE · Known exploited CVE
- Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure16:24 · The Hacker News · Known exploited CVE
Quiet for 6 days
Thu 26 MarDay 62- Critical Flaw in Langflow AI Platform Under Attack19:48 · Dark Reading · Picked up again · Known exploited CVE
- U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog22:02 · Security Affairs · Known exploited CVE
- Fri 27 MarDay 71
- U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog10:59 · Security Affairs · Known exploited CVE
Quiet for 13 weeks
Sat 27 JunDay 991- Langflow CVE-2026-33017 flaw leveraged to deploy cryptominer02:46 · SecurityOnline · Picked up again · Known exploited CVE
Quiet for 5 weeks
Thu 30 JulDay 1321- Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks10:32 · Unit 42 · Picked up again · Known exploited CVE · This article, 8th of 8