Don't count on the LLM to return your data - even if you pay up
Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.
Sysdig says it caught the first ransomware attack run entirely by an AI agent. It broke in, wiped a database, and left a ransom the victim can't pay off.
Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.
An LLM agent autonomously completed a full cyberattack in under an hour, while a separate AI exploit drained $175K in crypto tokens, signaling rising
Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by a large language model (LLM) agent.