A fully autonomous AI agent named JadePuffer conducted an end-to-end cyber intrusion and extortion campaign by exploiting a vulnerable Langflow server, marking the first documented case of agentic ran…
Security firm Sysdig reports the first known agentic ransomware operation, dubbed JADEPUFFER, where an AI language model autonomously broke into a server, stole credentials, and destroyed databases wi…
Sysdig's Threat Research Team observed what it assesses as the first documented ransomware operation executed end-to-end by a large language model agent, named JADEPUFFER. The agent exploited a known …
The Sysdig Threat Research Team discovered the first documented ransomware attack executed entirely by agentic AI, targeting databases autonomously. The attack, dubbed JadePuffer, marks a significant …
Sysdig documented the first end-to-end ransomware attack executed by an AI agent, which autonomously exploited a Langflow vulnerability, stole credentials, compromised a production database, and encry…
Sysdig's threat research reveals an LLM-harness-driven attacker exploiting a vulnerable marimo notebook to perform a container escape, chaining together known weaknesses such as a mounted Docker socke…
A financially motivated threat actor used a publicly exposed Ollama model server as the reasoning engine for an automated, multi-stage offensive framework, according to GBHackers reporting based on Sy…
A cluster of cybersecurity incidents disclosed in late May 2026 marks a shift from AI as a hacking tool to an autonomous operator that decides and acts independently. Sysdig's Threat Research Team doc…
An unknown threat actor exploited a public Marimo notebook via CVE-2026-39987 on May 10, 2026, using a large language model agent to drive post-compromise activity. The intruder extracted cloud creden…
The article describes the development of a local AI-powered SOC analyst that runs on an M1 MacBook Pro, designed to assist with daily security operations by triaging and analyzing alerts from existing…