Threat Brief — 2026-09-01 — ICS Advisories and AI Credential Theft

Executive summary: CISA published six Rockwell Automation advisories spanning privilege escalation, denial-of-service, and potential remote code execution across widely deployed industrial control products. Threat actors are actively exploiting an unauthenticated RCE in the Langflow AI framework to harvest OpenAI and AWS credentials — a development in a story first reported in late July. A detailed technical analysis of a critical Jenkins deserialization vulnerability highlights continued CI/CD attack surface.

Top items

• Langflow CVE-2026-0768 exploited to steal OpenAI and AWS keys — Unauthenticated remote code execution in Langflow, an open-source framework for building AI applications, is being actively exploited to steal cloud and AI service credentials including OpenAI API keys, AWS credentials, tokens, and other secrets. This is a developing story first reported 2026-07-29 by The Hacker News; the new development is that attackers are specifically targeting AI service keys and AWS credentials, sharpening the impact beyond earlier credential-probing reports. (src: BleepingComputer)

• Six CISA advisories for Rockwell Automation products — CISA released a coordinated batch of ICS advisories covering: FactoryTalk Activation Manager V5.02 and below (CVE-2026-16675); Redundancy Module Configuration Tool (privilege escalation to admin-level process execution); Logix Platform ControlLogix 5580 (CVE-2026-9637); ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, and Compact GuardLogix; Historian ME (out-of-bounds write, potential RCE); and RSLinx Classic (denial-of-service). Impact ranges from DoS to full privilege escalation and possible remote code execution across both legacy and current industrial control system components. (src: CISA ICSA-26-244-04 | CISA ICSA-26-244-02 | CISA ICSA-26-244-03 | CISA ICSA-26-244-05 | CISA ICSA-26-244-06 | CISA ICSA-26-244-01)

• Jenkins deserialization vulnerability detailed — A technical analysis describes a critical deserialization flaw in Jenkins that can lead to data compromise and full server takeover, demonstrating practical attack paths against CI/CD infrastructure. No specific CVE identifier was provided in the source material. (src: Xakep)

Themes

• AI development infrastructure as a credential goldmine — The Langflow exploitation for OpenAI and AWS keys adds to a sustained pattern of attacks targeting AI platforms and their API credentials, reinforcing that AI tooling stacks are now a primary target for secret theft.
• Coordinated ICS advisory drops — The six simultaneous Rockwell advisories illustrate the persistent and broad vulnerability surface in industrial control systems, where legacy components (RSLinx Classic) and current platforms (Logix 5580) carry exploitable flaws across DoS, privilege escalation, and RCE categories.