In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

What it is

SecurityWeek's weekly roundup. Three items carry detail an engineer can act on: a Langflow command-injection bug (CVE-2026-105740), an unauthenticated RCE PoC against XWorm RAT C2 panels, and the ICS-Sniper traffic-analysis attack on cloud-hosted SCADA. Intel's SGX roadmap change and Bank of America's remediation spending are also relevant to planning.

How it works

Langflow, CVE-2026-105740. Any authenticated user can add an MCP server configured with the Stdio transport. The supplied command is passed to bash with no validation or sandboxing, which gives code execution on the server.

XWorm C2 panel (versions up to 7.4). An attacker who has the panel's address, port and communication key poses as an infected machine. All three values can be pulled from an XWorm client's configuration. The attacker then overwrites a DLL through path traversal and gets code running on the C2 host, with no operator action needed.

ICS-Sniper (UBC). An attacker controlling a router on the path studies the size, direction and timing of VPN-encrypted packets. From that they predict when critical commands or data are being exchanged, and drop the payload-carrying packets in those windows. The encryption is never broken.

Preconditions / Affected

• Langflow: versions before 1.9.0 with an authenticated account available. Previdian's honeypots logged over 1,800 attempts from 28 IPs in 16 countries. The first attempt was September 19, and the CVE was published October 5, so any exposed instance was in scope for more than two weeks before disclosure.
• XWorm: relevant mainly to defenders and researchers who handle XWorm infrastructure. The researcher says it appears to be exploited on a limited scale.
• ICS-Sniper: needs a compromised router on the network path to a cloud-hosted SCADA deployment. Results come from emulated SWaT water-treatment testbeds: clean-water pumping started about 15 minutes late, and in a separate test a valve stayed open more than nine minutes longer than intended.

What to do

• Upgrade Langflow to 1.9.0 or later.
• For Langflow instances that were exposed before upgrading, review the logs back to September 19 for MCP server creation with a Stdio transport. The page gives no detection query or indicators, so this is an inference from the mechanism.
• If you run SGX-based confidential computing, plan a move to TDX. Diamond Rapids is the last Xeon platform with SGX, and the page says existing SGX platforms keep support and security updates into the early 2030s.
• For ICS-Sniper, the page names no mitigation, so there is nothing to apply from it. Cloud-hosted SCADA owners should treat VPN encryption as not protecting availability or timing against a path-controlling attacker.

Caveats

• ICS-Sniper is a proof of concept, tested on emulated testbeds rather than live plants.
• The XWorm exploitation claim comes from the researcher, who says it appears limited in scale.
• Previdian's counts come from its own honeypot sensors, so they are a floor, not total activity.
• This is a roundup, so each item is a few sentences. Primary sources (Previdian, the UBC paper, the XWorm PoC) would be needed for indicators or reproduction detail.