The Agentic AI Threat Cluster: Exploiting Langflow, n8n, and Hermes Agent Frameworks
The cybersecurity landscape is transitioning from human-led AI assistance to autonomous Agentic AI execution, drastically reducing the defender's response window. Threat actors are utilizing open-source frameworks such as Hermes Agent and OpenClaw, combined with reasoning models like DeepSeek, to conduct high-speed, self-correcting attacks. These campaigns target critical infrastructure and software including Langflow, n8n, and Citrix NetScaler through automated metadata scraping (OAuth/OIDC), prompt-based safety bypasses, and real-time exploitation sourcing. This shift enables unprecedented operational tempo, where AI-driven agents can diagnose and remediate payload errors in seconds, facilitating rapid credential attacks and data exfiltration across government and enterprise networks.
Agentic AI Defense: Tenable's CyberAgents Exchange and the Shift Toward Automated Operational Plumbing
At Black Hat USA 2026, security researchers and industry leaders, including Tenable and Anthropic, demonstrated a paradigm shift from high-level automation to agentic security engineering. While attackers are utilizing LLMs to reduce the cost of exploitation to 1990s-era levels, defenders are deploying agentic reasoning to solve critical operational toil. Key technical developments include the CyberAgents Exchange—a vendor-agnostic registry for AI agents and Model Context Protocol (MCP) servers—and specialized tools like Chokepoint Finder, which uses agentic orchestration to compress thousands of vulnerability findings into high-impact remediation actions. This evolution focuses on democratizing security engineering and automating the "connective tissue" of defensive operations.