FBI Probes ID Theft; SonicWall and Langflow Flaws Exploited

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily for CISOs, security leaders, and decision-makers. Today’s briefing covers five developments shaping cyber risk:

1. 01

   The FBI is investigating a dark web service offering scans of more than 153 million U.S. and Canadian driver’s licenses and other identity documents, potentially stolen from a Louisiana identity verification provider. The breach highlights how centralized ID databases can create large-scale risks of fraud, stalking, and identity abuse.

2. 02

   SonicWall says attackers are exploiting two zero-day vulnerabilities in SMA1000 secure remote access appliances, potentially enabling unauthenticated remote code execution. Customers using the 6210, 7210, or 8200v should apply hotfixes urgently, as the devices are high-value targets and attack details remain limited.

3. 03

   Attackers are actively exploiting a critical unauthenticated remote code execution flaw in Langflow to steal environment variables, AWS secrets, and OpenAI API keys. With hundreds of attempts observed, exposed instances running version 1.4.2 or earlier present a direct risk to AI workflows, cloud infrastructure, and sensitive data.

4. 04

   A security experiment found that AI-assisted porting of a PLC exploit required hours of human work and significant compute costs. The results suggest AI may lower barriers for offensive operations, but complex industrial attacks still demand expert guidance.

5. 05

   Researchers have mapped a repeatable playbook used by The Gentlemen ransomware operation, enabling affiliates to move from stolen credentials to encryption in as little as 24 hours. Their use of legitimate tools, data theft, and backup disruption shows how quickly weak remote access controls can become a business-wide recovery crisis.