Attackers using Langflow flaw for credential harvesting (CVE-2026-55255)

This feed highlights active exploitation and high-risk incidents plus several vendor product updates. Key security items: 1) CISA added Langflow vulnerability CVE-2026-55255 to its Known Exploited Vulnerabilities catalog after Sysdig observed active targeting — attackers are leveraging the Langflow flaw for credential harvesting. Langflow is an open-source visual framework used for building AI agents and workflows. 2) Accenture acknowledged a security incident after a threat actor claimed to exfiltrate ~35 GB of source code and sensitive artifacts (RSA/SSH keys, Azure personal access tokens, A