This week on IT SPARC Cast – CVE of the Week, John and Lou cover three newly exploited vulnerabilities affecting Langflow, Apache Tomcat, and N-able N-central. While each vulnerability is serious on its own, the bigger story is how attackers are increasingly using AI to identify targets, automate reconnaissance, and accelerate attacks.
The discussion also explores recent research showing threat actors using AI to prioritize targets, why network anomaly detection is becoming more important than ever, and why organizations can no longer afford to wait for monthly patch cycles. If you’re responsible for enterprise IT, this episode highlights why continuous patching and AI-assisted defense are quickly becoming necessities.
⸻
📄 Show Notes
🚨 CVE of the Week
This week we’re covering three newly exploited vulnerabilities that every enterprise IT team should know about.
Langflow (CVE-2026-9198 | CVSS 9.8)
A critical unauthenticated remote code execution vulnerability affecting default Langflow deployments. Particularly concerning because Langflow is widely used for building AI workflows and agent-based applications.
Fixed in: Langflow 1.10.1
⸻
Apache Tomcat (CVE-2026-34486 | CVSS 7.5)
A vulnerability affecting encrypted cluster communication in Apache Tomcat. Successful exploitation can expose sensitive cluster traffic and weaken security in highly available enterprise deployments.
Patched in:
⸻
N-able N-central (CVE-2026-18556 & CVE-2026-18577)
An authentication bypass vulnerability followed by a second patch after the original fix proved incomplete. Both vulnerabilities are now considered actively exploited.
⸻
🤖 AI Is Changing the Threat Landscape
Researchers observed attackers using AI to help identify and prioritize targets before launching attacks.
The takeaway isn’t simply that AI is being used—it’s that attackers are becoming faster and more efficient.
John and Lou discuss why defenders must respond with:
The only practical way to keep pace with AI-assisted attacks is to use AI as part of your defense strategy.
⸻
🛠️ Recommended Actions
⸻
💬 Mail Bag
Listener BJ appreciated that last week’s episode focused on the enterprise impact of OpenWRT instead of treating it as simply another home router vulnerability.
John and Lou discuss why many open-source technologies quietly power enterprise infrastructure—and why understanding those hidden dependencies is becoming increasingly important.
⸻
📣 Wrap Up
How is your organization preparing for AI-assisted cyberattacks? Is continuous patching part of your strategy?
📧 feedback@itsparccast.com
Follow IT SPARC Cast
IT SPARC Cast
@ITSPARCCast on X
https://www.linkedin.com/company/sparc-sales/ on LinkedIn
John Barger
@john_Video on X
https://www.linkedin.com/in/johnbarger/ on LinkedIn
Lou Schmidt
@loudoggeek on X
https://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn
","author_name":"John Barger"}