TLDR Tech / InfoSec
JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models
Sysdig's Threat Research Team observed the JADEPUFFER threat actor re-exploiting a Langflow instance via CVE-2025-3248. The attacker autonomously performed credential harvesting, discovered Docker sockets, and deployed a privileged escape container to stage ENCFORGE, a ransomware designed to encrypt AI/ML extensions. The attacker's adaptive behavior, evident in iterating multiple scripts to achieve a host escape after an initial failure, highlights their agentic capabilities. Defenders are advised to patch Langflow, restrict Docker access, monitor for suspicious container activity and file creation on model paths, and maintain immutable snapshots of model weights.
Read the full story