The Hacker News
Security•2026-05-29
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit
Attackers exploited CVE-2026-39987 in Marimo and used an LLM agent to conduct post-exploitation activities including credential extraction, AWS access, and database exfiltration.
