Unit 42 details a DeepSeek-driven agent that launched attacks after a single Telegram command.
Attackers can chain multiple critical bugs in n8n's HTTP Request, Git, and XML nodes to fully compromise automation servers.