CyberConfirmedHighDevelopingFeatured

ENCFORGE ransomware targets AI infrastructure via Langflow vulnerability

The newly identified ENCFORGE ransomware specifically encrypts AI model weights, vector indexes, and training datasets. The threat actor is exploiting a critical Langflow vulnerability (CVE-2025-3248) to gain root access, marking a shift toward targeting specialized AI-driven infrastructure.

The Hacker Newsabout 15 hours agoCredibility 54%View source

Score Breakdown

Mosaic Score7.7

Confidence0.9

Significance0.8

Source credibility0.5

Intelligence Tags

#ransomware #ai-security #cve-2025-3248 #langflow #cybersecurity

Entities

concept

Source

Part of a situation

developingCyber2h ago

New Malware & Ransomware Target AI Development Infrastructure

Two new cyber threats, a malware variant and ENCFORGE ransomware, are confirmed to be actively targeting AI development infrastructure. The malware focuses on data exfiltration and sabotage, while ENCFORGE specifically encrypts AI model weights and training data by exploiting a Langflow vulnerability (CVE-2025-3248). This represents a confirmed shift towards specialized attacks on AI pipelines and data integrity.

↑ escalating·2 signalsScore 8.3