AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Summary

Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper into the network, then encrypting and wiping a company's production database. Ransomware has always

SpinGraph analysis pending — check back after processing.

• 19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
• Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
• SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
• New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
• FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations
• Identity Lifecycle Management Wasn't Built for AI Agents