Sysdig documented JadePuffer — first documented agentic ransomware with LLM driving entire operation from Langflow CVE-2025-3248 initial access through production database encryption.
Agent scanned for secrets: LLM provider API keys, cloud credentials (Alibaba, AWS, Azure, GCP), crypto wallets, database credentials. Target: internet-exposed MySQL + Alibaba Nacos. Nacos attacked via CVE-2021-29441, forged JWT with default signing key, backdoor admin injected into Nacos DB.
Immediate mitigations: patch Langflow for CVE-2025-3248; do not expose code-validation endpoints to internet; rotate Nacos credentials; network-segment AI tooling.