How AI is changing the nature of cyberattacks

Summary

AI is making cyberattacks faster and larger in scale, but security experts say it has not yet changed attackers' core objectives or techniques. In JadePuffer, a ransomware campaign disclosed in July 2026, an LLM-driven agent automated most of the intrusion chain, starting with exploitation of CVE-2025-3248, a missing-authentication flaw in Langflow. Vulnerable internet-facing Langflow instances were looted for cloud credentials and API keys before destructive database encryption.

Related items

• MediumGHSA-8prr-f582-jqq3: LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputSame vendor · GitHub Advisory Database
• HighGHSA-4hm6-w6qq-w73v: LangGraph JavaScript custom authentication may permit cross-user Store accessSame vendor · GitHub Advisory Database
• MediumGHSA-3fx2-cqw9-xr3c: LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsSame vendor · GitHub Advisory Database
• MediumGHSA-6hmw-9432-67qq: LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesSame vendor · GitHub Advisory Database
• MediumLangflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit AttemptsSame vendor · The Hacker News