Security researchers have identified JadePuffer as the first known agentic ransomware fully governed by a large language model. The system is notable because it goes beyond the classic model of ransomware, in which attackers still need to steer the operation remotely. Instead, JadePuffer can discover targets, collect credentials, move through a system, and encrypt files on its own, while adapting to conditions in real time. The reported entry point was a zero-day flaw in Langflow, an open-source AI development tool. From there, the malware expanded its reach by accessing a Nacos server and a MySQL database. Researchers also said the AI agent recovered from a failed backdoor attempt in just 31 seconds by analyzing the failure and switching methods. The finding suggests that AI-enabled, self-directed cyberattacks are moving from theory into real use, and that defenses based only on signatures may not be enough.
JadePuffer shows a new phase in AI-driven ransomware
A security finding points to a ransomware strain that uses a large language model to run many steps of an attack by itself.
More stories to read
technology2 min read10/27/2026Apple Offers Duo Replacements as Hinge Comes Under Scrutiny
Apple has acknowledged early inner-display failures in a small number of iPhone Duos. An iFixit teardown points to possible hinge-related pressure, while limited supplies have delayed some replacements.
technology2 min read10/26/2026Android’s Automatic Number Verification Extends Across Google Accounts
Android’s default verification setting links SIM phone numbers to all signed-in Google accounts, including work accounts. Disabling it leaves existing links intact and may affect RCS messaging and account recovery.
ai2 min read10/23/2026AI-Assisted PHP Discoveries Trigger Emergency Patching Across the Web
Two critical PHP vulnerabilities prompted precautionary shutdowns and urgent updates worldwide, highlighting both AI's value in security research and the challenge of deploying fixes.
technology2 min read10/22/2026BETA Secures First-of-Its-Kind FAA Authorization for Electric VTOL Demonstrations
A new FAA authorization permits BETA to carry prospective customers aboard its ALIA A250 and expand its demonstration area. The milestone follows a safety review but does not replace full certification for routine commercial operations.
technology2 min read10/21/2026Meta’s Petal Cable Targets Petabit Capacity Across the Atlantic
Petal will use dual-core optical fibers and specialized signal amplification to double transatlantic cable capacity without a proportional rise in power requirements. The Meta-funded system is scheduled to enter service in 2029.