AI-powered attacks are automating entire attack chains, including lateral movement via LLM-powered agents, drastically reducing the time from initial access to deep compromise, according to reports fr…
Sysdig's JadePuffer report details the first fully autonomous ransomware attack executed by an AI agent. The agent exploited CVE-2025-3248 in Langflow to gain initial access, then autonomously escalat…
Multiple critical vulnerabilities in Langflow and Dify AI agent platforms have enabled remote code execution and data exposure, with one Langflow flaw exploited within 20 hours of disclosure. Security…
Security researchers have identified JadePuffer, the first documented case of fully agentic ransomware driven end-to-end by AI. The campaign exploited a vulnerability in Langflow to gain access, steal…
Security firm Sysdig reports the first known agentic ransomware operation, dubbed JADEPUFFER, where an AI language model autonomously broke into a server, stole credentials, and destroyed databases wi…
Sysdig's Threat Research Team observed what it assesses as the first documented ransomware operation executed end-to-end by a large language model agent, named JADEPUFFER. The agent exploited a known …
Approximately 7,000 publicly exposed Langflow server instances are under active attack due to critical remote code execution vulnerabilities, including CVE-2026-5027, CVE-2026-33017, and CVE-2025-3248…