cisa

Langflow RCE exploited in 20 hours, TeamPCP poisons the AI supply chain

CISA flagged active exploitation of a critical Langflow RCE flaw within 20 hours of disclosure. Meanwhile, TeamPCP compromised telnyx, litellm, Trivy, and KICS in a coordinated supply chain campaign targeting AI dev tooling.