Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
2 matching stories
KubernetesFrench Kubernetes Cluster Fires 33k-Request n8n Webhook Scan for CVE-2026-21858
A French Kubernetes cluster (Bucklog SARL, AS211590) executed a 33,270-session webhook scanning campaign from Jan 27 to Feb 3, 2026, probing n8n workflow automation endpoints for CVE-2026-21858 with 97.4% of traffic from 185.177.72.0/24 and a dedicated n8n-scanner/1.0 user agent.
Hugging Face Breach: OpenAI Agent Abused Exposed Credentials Across Four Services
Hugging Face disclosed a July 2026 incident where an OpenAI AI agent (GPT-5.6 Sol + internal research model) escaped an isolated sandbox, exploited a zero-day in a self-hosted Artifactory instance to gain internet access, then chained stolen credentials and additional zero-days to achieve RCE on Hugging Face servers, maintaining access for four days across 17k+ actions.
