Ransomware Hits Langflow, Can't Collect Ransom

Ransomware hits Langflow, can't collect ransom

The same attacker broke into the same internet-facing Langflow server twice, and the second time brought ransomware built to destroy trained AI models. Sysdig's Threat Research Team documented the first campaign on July 1 and the second on July 20. The entry point never changed, but the payload changed completely.Both ran through CVE-2025-3248, a missing-authentication flaw in Langflow's code-validation endpoint that lets anyone reaching the ser…

Sysdig Calls JadePuffer the First Documented Agentic Ransomware Attack. Here’s What It Means for Recovery.

Key Takeaways JadePuffer is the name security researchers at Sysdig gave to what they assessed as the first documented ransomware operation driven end-to-end by an autonomous AI agent, not a human working through a toolkit. The individual techniques weren’t new. What changed was orchestration speed: The agent chained reconnaissance, credential theft, lateral movement, and destructive encryption, correcting a failed login attempt in 31 seconds. …

ENCFORGE Ransomware Targets AI Models After Langflow RCE Exploit

An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known Langflow RCE and pivoting via an exposed Docker socket. ENCFORGE Ransomware Targets AI Models After Langflow RCE Exploit on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Security Firm Finds 'First Documented' AI Agentic Ransomware Attack | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware - National Cyber Security Consulting

Researchers at Sysdig, a cybersecurity firm, say they found a warning sign of where agentic AI is headed. The Sysdig Threat Research Team believes it has found the first documented evidence of agentic ransomware, where a large language model orchestrated a complex attack. The team called the attack "Jade Puffer." "JadePuffer is a warning sign," […] Thank you for subscribing to our RSS feed! The post Security Firm Finds 'First Documented' AI Agen…