The Hacker News

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

AI agent exploits Langflow in first fully autonomous ransomware attack

has documented what it says is the first ransomware operation carried out from start to finish by an autonomous artificial ...
SDxCentral

AI agent carries out 'first' ransomware attack

Researchers claimed to have uncovered what may be the first ransomware attack to be conducted by an AI agent. Dubbed ...

JadePuffer ransomware used AI agent to automate entire attack

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.
The Next Web

An AI agent just ran a full ransomware attack with no human at the keyboard

Sysdig's JadePuffer case is billed as the first ransomware attack planned and executed end to end by an AI agent, with no human directing it.
Security Boulevard

JadePuffer Demonstrates How AI Agents Can Automate Ransomware Attack

Autonomous AI agents are no longer theoretical cyber risks as new research shows a large language model executing an end-to-end ransomware campaign, highlighting the urgency of patching known ...
Cybernews

AI-powered ransomware has officially arrived – and it's only the beginning

Ransomware attacks no longer require a human for execution: for the first time, an AI agent carried out a ransomware attack ...
CSOonline

Critical flaw in AI agent dev tool Langflow under active exploitation

Researchers from security firm Trend Micro warn that a critical remote code execution vulnerability patched in April in the Langflow AI agent framework is being exploited to deploy botnet malware. The ...