JADEPUFFER: the ransomware gang that never sleeps, never sits down, and never needed a human
Ourtake
The hack was old, the patch was a year old, and the machine just didn't bother to ask anyone for permission.
What happened
Sysdig reported that an AI agent it calls JADEPUFFER breached a server through an unpatched Langflow flaw (CVE-2025-3248), stole credentials, and reached a production MySQL server. The agent encrypted 1,342 configuration entries, deleted the original tables and left a Bitcoin ransom note, with no independent confirmation from victims or law enforcement so far.