Over tapas on Beacon Hill Monday night, a German software entrepreneur announced that Boston will be the new U.S. base for his company, n8n. While the company was building a foothold in New York, CEO ...

A fresh set of critical vulnerabilities in the popular workflow automation platform n8n is raising serious security concerns, as researchers warn that attackers could chain multiple flaws to achieve ...

A March 2026 phishing email in an Outlook inbox pretended to be a shared OneDrive folder. The link was a webhook URL on a tti.app.n8n.cloud subdomain, the legitimate footprint of an AI workflow ...

Workflow automation startup n8n has secured a strategic investment from SAP, taking its valuation to $5.2 billion. The company was previously valued at $2.5 billion in October last year. Alongside the ...

Hackers are abusing n8n workflows to deliver malware and evade detection, according to Cisco Talos, using trusted automation to bypass security defenses. A trusted automation tool has quietly become a ...

Attackers abuse AI automation platform n8n to run phishing campaigns, deliver malware, and evade security by using trusted infrastructure. Threat actors are exploiting the popular AI workflow ...

AI workflow automation platforms are rapidly becoming essential tools for modern businesses, seamlessly connecting applications like Slack and Google Sheets with advanced language models. However, ...

Threat actors have been observed weaponizing n8n, a popular artificial intelligence (AI) workflow automation platform, to facilitate sophisticated phishing campaigns and deliver malicious payloads or ...

A critical security flaw in n8n, a widely used open-source workflow automation platform, exposes host servers to Remote Code Execution (RCE) attacks. Tracked as CVE-2026-33660, this critical ...

Researchers at Pillar Security have found two new critical vulnerabilities in self-hosted and cloud n8n deployments. N8n is a popular open-source workflow automation platform powering hundreds of ...

The bugs allowed unauthenticated attackers to execute arbitrary code, steal credentials, and take over servers. Two critical-severity vulnerabilities in n8n could have been exploited for ...

Webhook providers use at-least-once delivery. If a request times out or fails, the provider retries — and your workflow executes twice. The same Stripe charge runs again. The same confirmation email ...