analiza aiqbench
The article details a specific ransomware campaign targeting AI infrastructure by exploiting authentication flaws in Langflow to encrypt models and training data. This represents a critical shift where attackers now aim directly at the intellectual property within AI systems rather than just general server files. For the community, this underscores the urgent need for robust access controls on code-validation endpoints used in ML development pipelines.
Agentic JADEPUFFER Exploits Langflow Flaw to Deploy ENCFORGE AI Ransomware
A ransomware campaign is now targeting the assets behind artificial intelligence systems. The threat actor known as JADEPUFFER has evolved from damaging databases to deploying ENCFORGE, a ransomware strain designed to encrypt AI models, training data, and vector databases. The operation begins by exploiting CVE-2025-3248, a critical missing-authentication flaw in Langflow’s code-validation endpoint. The bug […] The post Agentic JADEPUFFER Exploits Langflow Flaw to Deploy ENCFORGE AI Ransomware appeared first on Cyber Security News.
A ransomware campaign is now targeting the assets behind artificial intelligence systems. The threat actor known as JADEPUFFER has evolved from damaging databases to deploying ENCFORGE, a ransomware strain designed to encrypt AI models, training data, and vector databases. The operation begins by exploiting CVE-2025-3248, a critical missing-authentication flaw in Langflow’s code-validation endpoint. The bug allows an unauthenticated attacker to run Python code on exposed servers, creating a direct path into environments…
Extras afișat conform termenilor RSS ai publicației · 72 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
AI Agents Now Run Ransomware Attacks End-to-End Without Human Operators
Cybersecurity News · 18 sept. 2026
JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models
Sysdig Blog · 20 iul. 2026
When Ransomware Targets AI Models: Defending the AI/ML Recovery Chain
Cybersecurity News · 20 sept. 2026
JADEPUFFER: Agentic ransomware for automated database extortion
Sysdig Blog · 1 iul. 2026