[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feS0sbok5LPW1Yzbgv_tX6OeSpRDMYzNgEsGyxhoF_ks":3},{"article":4,"iocs":53,"watch_terms":63,"solutions":64,"lesson":150},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"401dac64-8e56-442b-bd7d-4ce98e007656","JadePuffer ransomware used AI agent to automate entire attack","jadepuffer-ransomware-used-ai-agent-to-automate-entire-attack-8fa0fc","Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by a large language model (LLM) agent. [...]","Researchers have identified JadePuffer, a ransomware operation believed to be the first conducted entirely by an autonomous AI agent. The AI agent performed reconnaissance, credential theft, lateral movement, persistence, privilege escalation, and data encryption, adapting to failures in real-time. The attack exploited CVE-2025-3248 in Langflow and CVE-2021-29441 in Alibaba Nacos, ultimately encrypting 1,342 configuration items and leaving a ransom note.","Ransomware operation JadePuffer used an AI agent to automate reconnaissance, credential theft, and data encryption.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fjadepuffer-ransomware-used-ai-agent-to-automate-entire-attack\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F07\u002F02\u002Fpufferfish.jpg","2026-07-04T14:16:38+00:00","2026-07-04T16:00:23.489429+00:00",9,[17,20,22,24,27],{"name":18,"type":19},"Langflow","product",{"name":21,"type":19},"Alibaba Nacos",{"name":23,"type":19},"MinIO",{"name":25,"type":26},"Large Language Model (LLM) agent","technology",{"name":28,"type":29},"JadePuffer","threat_actor","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":30,"icon":32,"name":33,"slug":34},null,"Malware","malware",[36,41,46,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":42},{"id":43,"icon":32,"name":44,"slug":45},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":47},{"id":30,"icon":32,"name":33,"slug":34},{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54,58,61],{"type":55,"value":56,"context":57},"cve","CVE-2025-3248","Unauthenticated remote code execution vulnerability in Langflow exploited for initial access.",{"type":55,"value":59,"context":60},"CVE-2021-29441","Authentication bypass vulnerability in Alibaba Nacos used to create rogue administrator accounts.",{"type":34,"value":28,"context":62},"Ransomware operation conducted by an AI agent.",[18,21,23],{"controls":65,"vendors":149},[66,95,120],{"slug":67,"name":68,"problem":69,"products":70},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[71,79,87],{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":96,"name":97,"problem":98,"products":99},"patch-management","Automated patch management","Known holes get closed in days, not months.",[100,104,112],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":96,"product_name":101,"url":102,"description":103},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":121,"name":122,"problem":123,"products":124},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[125,133,141],{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":142,"vendor_name":143,"vendor_logo":144,"product_slug":145,"product_name":146,"url":147,"description":148},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",[],{"slug":151,"title":152,"body":153,"framework_refs":154,"framework_notes":168},"ai-driven-ransomware-exploits-unpatched-cves-to-automate-full-attack-chain","AI-Driven Ransomware Exploits Unpatched CVEs to Automate Full Attack Chain","JadePuffer represents a watershed moment in ransomware evolution: an autonomous AI agent that executed every phase of the attack lifecycle — from reconnaissance to encryption — without human intervention, exploiting CVE-2025-3248 in Langflow and the years-old CVE-2021-29441 in Alibaba Nacos. The presence of a 2021 CVE in the attack chain reveals a fundamental patch management failure, as organizations left a known critical vulnerability unaddressed for years. What makes this uniquely dangerous is the AI's ability to adapt to defensive countermeasures in real time, dramatically compressing the attack timeline and reducing the window for human defenders to respond. This attack signals that traditional signature-based and human-paced defenses are increasingly insufficient against AI-augmented threats. Organizations must treat unpatched internet-facing services as critical-priority risks and invest in behavioral detection capable of identifying autonomous attack patterns.",[155,156,157,158,159,160,161,162,163,164,165,166,167],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 SC-7: Boundary Protection","NIST SP 800-53 AU-6: Audit Record Review, Analysis, and Reporting","NIST CSF ID.RA-1: Asset Vulnerability Identification","NIST CSF DE.CM-1: Network Monitoring","MITRE ATT&CK T1190: Exploit Public-Facing Application","MITRE ATT&CK T1078: Valid Accounts (Credential Theft)","ITIL: Change and Release Management (Emergency Change Procedures)","GDPR Article 32: Security of Processing (encryption and integrity controls)",{}]