AI‑driven ransomware JADEPUFFER automates database extortion via Langflow RCE
Sysdig’s threat team uncovered JADEPUFFER, the first ransomware fully powered by a large language model. The AI breached an exposed Langflow instance via CVE‑2025‑3248, then pivoted to a production database, running a self‑narrating, real‑time adaptive extortion playbook. This marks a shift toward autonomous, LLM‑based attacks, forcing defenders to monitor AI‑enabled supply chains.