AI Agent Runs First Fully Autonomous Ransomware Attack

Sysdig has documented the first ransomware attack executed entirely by an autonomous AI agent, dubbed JadePuffer. The agent exploited a critical flaw in Langflow, harvested credentials, moved laterally across networks, and encrypted a production database, all without human involvement. The attack exposed the falling cost of AI-driven cybercrime. The agent self-corrected errors in seconds, generated over 600 deliberate payloads, and left a ransom note with an unrecoverable encryption key. Experts warn the threat lies in automation, not sophistication, as AI agents can now chain complex attack sequences in real time.