\n Agentic AI<\/a> Researchers Say the Assault Mixed AI Choice-Making With Identified Software program Flaws<\/span> An autonomous synthetic intelligence agent has carried out what researchers describe as the primary agentic ransomware assault, exploiting vulnerabilities, stealing credentials and encrypting a manufacturing database with out human intervention.<\/p>\n See Additionally:<\/b> Know Thy Enemy: Threats to Cyber Resilience<\/a><\/p>\n Cloud safety agency Sysdig attributed<\/a> it to a menace actor it tracks as Jadepuffer. Researchers mentioned the incident reveals that enormous language fashions can autonomously execute a full ransomware life cycle, together with reconnaissance, credential theft, lateral motion, privilege escalation and knowledge encryption.<\/p>\n The findings come because the cybersecurity businesses of the 5 Eyes alliance warn that advances in AI are accelerating the pace, scale and class of cyberthreats. “The timeline is just not years; it’s months,” the businesses mentioned<\/a> in a joint assertion in June (see: 5 Eyes Warn the Frontier AI Cyberthreat Is Months Away)<\/i><\/a>. <\/p>\n The intrusion started with the exploitation of CVE-2025-3248<\/a>, a vital authentication bypass vulnerability in Langflow’s code validation endpoint. Langflow is an open-source framework used to construct AI functions and agent workflows. The flaw permits unauthenticated distant code execution on uncovered servers and was added to CISA’s Identified Exploited Vulnerabilities catalog<\/a> in Could.<\/p>\n After gaining entry, Jadepuffer searched the compromised setting for cloud credentials, API keys, cryptocurrency wallets, configuration information and database secrets and techniques. It dumped Langflow’s PostgreSQL database to reap saved credentials, scanned inside networks and accessed an uncovered MinIO object storage service utilizing default credentials. Researchers mentioned the agent additionally established persistence by deploying a cron job that beaconed to attacker-controlled infrastructure each half-hour.<\/p>\n
\n ,
\n Fraud Administration & Cybercrime<\/a>
\n ,
\n Ransomware<\/a>\n <\/p>\n
\n
\n Pooja Tikekar<\/a> (@PoojaTikekar<\/a>) \u2022
\n July 5, 2026<\/span> \u00a0 \u00a0 <\/span><\/p>\n![\"AI](\"https:\/\/ismg-cdn.nyc3.cdn.digitaloceanspaces.com\/articles\/ai-agent-pulls-off-ransomware-attack-without-human-help-image_large-6-a-32155.jpg\")