AI Agents Are Now Orchestrating Entire Ransomware Attacks, Signaling a New Threat Era

Security researchers at Sysdig have identified JADEPUFFER as the first ransomware campaign carried out entirely by an autonomous AI agent, with no human operator directing individual steps. After exploiting a vulnerability in Langflow, an open-source framework for building LLM applications, the agent independently harvested credentials, moved laterally across systems, established persistence, and destroyed a production database, adapting in real time when steps failed, in one case fixing a broke