31 Seconds to Breach — Inside the First AI-Run Ransomware Attack

In this episode, Sherri and Matt discuss JADEPUFFER — the first publicly documented ransomware operation executed end-to-end by an AI agent. According to Sysdig Threat Research, the AI drove the whole intrusion: reconnaissance, exploitation, lateral movement, and extortion. It fixed its own failed attacks in 31 seconds, fired off 600+ payloads, and encrypted 1,342 database records — yet it also narrated its crimes in plain English and demanded ransom to a hallucinated Bitcoin address. Fast AND flawed: an amateur hacker operating at machine speed.

Sherri and Matt trace how we got here — from PromptLock to criminal “vibe hacking” — and what machine-speed adversaries mean for your incident response, your threat model, and your Monday-morning to-do list.

Key Takeaways

• Inventory your AI attack surface. Ask which of your vendors’ and internal AI tools are internet-facing and unpatched — JADEPUFFER walked in through a known, long-patched Langflow vulnerability.
• Reset your incident response expectations. Adversaries can now adapt in seconds, not hours. Human-paced SLAs are no defense against a 31-second fix loop — invest in automated detection and containment.
• Widen your threat model. The skill floor has collapsed. Adaptive, competent attacks can now come from completely unsophisticated actors armed with an AI agent and a target list.
• Add AI-driven attack scenarios to your next tabletop exercise — and decide in advance who can authorize automated containment, because you won’t have time to convene a meeting mid-attack.

References

• Sysdig — JADEPUFFER: Agentic Ransomware for Automated Database Extortion
• BleepingComputer — JADEPUFFER ransomware used AI agent to automate entire attack
• The Hacker News — AI agent exploits Langflow RCE
• NVD — CVE-2025-3248 (Langflow unauthenticated RCE)
• ESET — PromptLock, the first AI-powered ransomware (NYU proof-of-concept)
• Anthropic — Detecting and countering misuse (vibe hacking / GTG-2002)
• Anthropic — Disrupting AI espionage (GTG-1002)