First agentic ransomware attack JADEPUFFER discovered

Sysdig researchers documented the first fully autonomous AI-driven ransomware attack, dubbed JADEPUFFER. The attack exploited a Langflow vulnerability (CVE-2025-3248), encrypted 1,342 Alibaba Nacos configuration items, and dropped database tables. No backup or decryption key was created, so paying the ransom would not recover the data.