LOWAi
Global

The n8n n8mare: How threat actors are misusing AI workflow automation

·Source: Cisco Talos

Updated:

Executive Summary

Cisco Talos research has uncovered agentic AI workflow automation platform abuse in emails. Recently, we identified an increase in the number of emails that abuse n8n, one of these platforms, from as early as October 2025 through March 2026.

Analysis

Cisco Talos research has uncovered agentic AI workflow automation platform abuse in emails. Recently, we identified an increase in the number of emails that abuse n8n, one of these platforms, from as early as October 2025 through March 2026.
Source Attribution

Originally published by Cisco Talos on Apr 15, 2026.

Related Threats

MEDIUMAiNEW

ISMG Editors: Can Humans Still Keep AI Agents in Check?

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ismg-editors-humans-still-keep-ai-agents-in-check-image_small-5-a-32803.jpg" align=right hspace=4><b>Also: AI Agents Breathe New Life in Zero Trust, OpenAI's Chip Puts Nvidia on Notice</b><br>In this week's panel, four ISMG editors discussed the growing challenge of keeping human beings in control of AI agents, what security leade

Bank Info Security
LOWAi

CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

<p><b>Bulletin ID:</b> 2026-111-AWS<br> <b>Scope:</b> AWS<br> <b>Content Type:</b> Important (requires attention)<br> <b>Publication Date:</b> 09/11/2026 12:00 PM PDT</p> <p><b>Description:</b></p> <p>Kiro IDE is an agentic development environment that makes it easy for developers to ship real engineering work with the help of AI agents.</p> <p>We identified CVE-2026-89332, where the Kiro agent co

CVE-2026-89332
AWS Security Bulletins
MEDIUMAi

AI Agents Used in PaperCut Attacks on 395 Organizations

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ai-agents-used-in-papercut-attacks-on-395-organizations-image_small-4-a-32801.jpg" align=right hspace=4><b>GreyNoise Says Attacker Used Hundreds of Agents in 48-Country Campaign</b><br>A likely Russian-speaking attacker used hundreds of AI agents to exploit PaperCut systems, compromising at least 440 systems at 395 organizations i

Bank Info Security