LLMjacking has grown from a proof-of-concept threat documented by Sysdig in May 2024 into a commercialized criminal enterprise, according to a March 15, 2026 research note from the Cloud Security Alli…
Threat intelligence firm VulnCheck and the Cloud Security Alliance report that attackers exploited CVE-2026-0768, an unauthenticated remote code execution vulnerability in the open-source AI framework…
A developer's analysis of thirteen cyber incidents from late 2025 through August 2026 reveals a common failure: attackers exploit valid credentials at machine speed, outpacing human-paced defenses. Th…
The AI cybersecurity arms race is being won by attackers, with Sysdig documenting JADEPUFFER in July 2026 as the first fully autonomous AI-driven ransomware attack, and Unit 42 at Palo Alto Networks u…
Sysdig documented JADEPUFFER, the first fully autonomous ransomware agent, which is operational today, and supply chain worms have compromised packages with 1.3 billion monthly downloads. The mean tim…
IBM's 2026 X-Force Threat Intelligence Index found that roughly one in six breaches now involve AI, with AI-generated phishing and deepfake impersonation making up the bulk. In July 2026, security fir…
Pathlock's 2026 AI Governance Gap Report reveals that 79% of organizations lack a dedicated AI governance team, even as AI agents are granted access to create business records, approve transactions, a…
Ransomware attacks rose year over year in June for the fourth consecutive month, though Q2 2026 saw only a 3% increase over the previous quarter, according to NCC Group. VPNs and network edge devices …
Sysdig's Terraform Skill Pack introduces two skills for agentic AI: terraform-plan-review flags destructive resource replacements in Terraform plans, and terraform-drift-detect surfaces infrastructure…
Threat actor JadePuffer has returned with ENCFORGE, a novel ransomware built to target AI and machine learning infrastructure, according to Sysdig researchers. The extortion contact embedded in the ra…
Cloud security firm Sysdig reported that an agentic threat actor named JADEPUFFER is exploiting a vulnerability (CVE-2025-3248) in AI framework Langflow to deploy ransomware that destroys AI model art…
Hugging Face disclosed a security breach Thursday in which autonomous AI agents compromised a limited set of internal datasets and several service credentials, marking what the company called the 'age…
WEKA has appointed Shanta Kohli as its new Chief Marketing Officer, replacing Lauren Vaccarello, as the AI storage supplier shifts its messaging focus to enterprise inferencing at scale and agentic AI…
AI-powered attacks are automating entire attack chains, including lateral movement via LLM-powered agents, drastically reducing the time from initial access to deep compromise, according to reports fr…
CISA added Langflow, the open-source AI workflow builder, to its Known Exploited Vulnerabilities catalog on July 7, 2026, marking the first AI agent orchestration platform in KEV, after two actively e…
Sysdig documented JADEPUFFER, a ransomware-style database extortion operation that used an AI agent to automate much of the intrusion chain, according to a July 1 technical report. The attack exploite…
Sysdig's JadePuffer report details the first fully autonomous ransomware attack executed by an AI agent. The agent exploited CVE-2025-3248 in Langflow to gain initial access, then autonomously escalat…
The US Cybersecurity and Infrastructure Security Agency (CISA) added a Langflow vulnerability (CVE-2026-55255) to its Known Exploited Vulnerabilities catalog after the Sysdig Threat Research Team obse…
Cloud security firm Sysdig reported the first ransomware campaign run entirely by a large language model, dubbed JadePuffer. The AI agent autonomously exploited a vulnerability in the Langflow framewo…
Security researchers have identified JadePuffer, the first documented case of fully agentic ransomware driven end-to-end by AI. The campaign exploited a vulnerability in Langflow to gain access, steal…