Security researchers have identified JadePuffer as the first ‘agentic’ ransomware known to be fully managed by a large language model. In contrast to more traditional ransomware, which still relies on an attacker’s remote control, JadePuffer can make decisions according to the environment it finds itself in and adapt immediately when it meets an obstacle. According to findings shared by the cloud security company Sysdig, the malware entered through a zero-day vulnerability in Langflow, an open-source AI development tool, before moving on to a Nacos server and a MySQL database. It then broadened the attack and was able to repair failed actions on its own; in one case, it analysed a failed backdoor attempt and switched methods within 31 seconds. Researchers say the system can handle target discovery, lateral movement, credential collection and file encryption automatically. They also warn that, as AI tools become more accessible, similar threats may spread quickly. For now, however, the real-world scale of JadePuffer’s use remains unclear.
JadePuffer marks a shift in AI-driven ransomware
Security researchers have identified JadePuffer as the first agentic ransomware fully directed by a large language model. The malware can carry out reconnaissance, steal credentials and encrypt files without human intervention, while also adjusting its behaviour in real time. Its discovery has raised concerns that similar threats could spread more quickly as AI tools become easier to use.
More stories to read
technology2 min read10/27/2026Apple offers iPhone Duo replacements as hinge fault comes under scrutiny
Apple has acknowledged early inner-display failures in a small number of iPhone Duos. Its replacement offer follows owner complaints and an iFixit investigation into possible pressure points within the hinge.
technology2 min read10/26/2026Android’s default verification links numbers across Google accounts
Automatic phone number verification extends to all Google accounts on an Android device, including accounts added later. Disabling it does not undo existing links and can affect messaging and account recovery.
ai2 min read10/23/2026AI-assisted PHP discoveries trigger emergency patches and precautionary shutdowns
Two critical PHP vulnerabilities have triggered an international effort to secure websites. Emergency patches followed an early disclosure, while governments and major services temporarily disconnected affected systems.
technology2 min read10/22/2026BETA secures landmark FAA clearance for electric aircraft demonstrations
A new FAA authorisation enables BETA to demonstrate its ALIA A250 to prospective customers, following a safety review. The aircraft completed a 39-mile flight in 20 minutes, although full commercial certification remains outstanding.
technology2 min read10/21/2026Meta’s Petal cable targets petabit capacity across the Atlantic
Scheduled to enter service in 2029, Petal will use dual-core optical fibres and specialised signal amplification to double transoceanic capacity without a proportional rise in power consumption.