AI Agent Runs Ransomware Attack Start to Finish via Langflow RCE

Sysdig says it has identified the first ransomware attack executed end-to-end by an autonomous AI agent, an operator its Threat Research Team calls JADEPUFFER. The agent exploited a remote code execution flaw in Langflow to break in, then handled credential theft and lateral movement on its own before encrypting and wiping a company’s production database. This marks a shift from AI-assisted attacks toward AI-operated ones. Organizations running Langflow should patch the RCE and audit for exploitation immediately.