Creating AI agents without coding: We tried out Langflow:

bleepingcomputer.com/news/security/critical-langflow-flaw-exploited-to-steal-openai-and-aws-keys/

Credibility A−

Sep 01

Critical Langflow flaw exploited to steal OpenAI and AWS keys: Threat actors are exploiting an unauthenticated remote code execution vulnerability ...

heise.de/news/Angreifer-attackieren-IBM-Langflow-und-Apache-Tomcat-Server-11403178.html

heise online

Aug 08

Attackers target IBM Langflow and Apache Tomcat servers: Attackers are currently pushing malicious code onto IBM Langflow instances. In Apache Tomcat cluster ...

theregister.com/security/2026/08/05/ibms-agentic-ai-platform-is-under-active-attack-patch-now/5283535

dlvr.it Aug 05

IBM's agentic AI platform is under active attack - patch now: A critical Langflow flaw allowing RCE on default deployments is being exploited, says the CISA

bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-langflow-n-central-apache-tomcat-flaws/

Aug 05

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws: The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies ...

venturebeat.com/security/new-ransomware-targets-ai-model-weights-and-cant-even-collect-the-ransom

VentureBeat

Jul 27

Ransomware hits Langflow, can't collect ransom | VentureBeat: A new ransomware strain scans specifically for AI model weights, and it has no way to collect a ...

bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-langflow-rce-flaw/

Jul 22

CISA orders urgent action on actively exploited Langflow RCE flaw: The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S ...

bleepingcomputer.com/news/security/jadepuffer-agentic-attacks-now-target-ai-model-data-with-ransomware/

Jul 20

JadePuffer agentic attacks now target AI model data with ransomware: The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that ...

Key FactsFirst AI Ransomware JadePuffer Aided by Humans

Jul 9, 2026 · Reading time: ~45 sec.
Summary created with AI assistance · Source: financialexpress.com

JadePuffer represents the first known ransomware fully executed by an AI agent without human technical input.

The AI penetrated systems, navigated obstacles, and encrypted a production database within minutes.

Human operators still directed the operation, provided initial credentials, and managed the supporting infrastructure.

This hybrid approach enables rapid, scalable cyberattacks while humans retain control over key strategic elements.

A human still set up and pointed the operation and provisioned the infrastructure behind it,
— Michael Clark, Sysdig’s senior director of threat research, describing the JadePuffer operation

15 similar articles

bleepingcomputer.com/news/security/cisa-orders-feds-to-prioritize-patching-langflow-auth-bypass-flaw/

Jul 08

CISA orders feds to prioritize patching Langflow auth bypass flaw: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until ...

venturebeat.com/security/7000-langflow-servers-under-attack-langgraph-langchain-same-holes

VentureBeat

Jun 19

AI agent framework flaws hit 7,000 servers | VentureBeat: Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph ...

venturebeat.com/security/copilot-searched-your-mailbox-litellm-handed-out-admin

2 0

VentureBeat

Jun 18

Copilot, LiteLLM and the AI trust boundary gap: SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks ...

bleepingcomputer.com/news/security/path-traversal-flaw-in-ai-dev-platform-langflow-exploited-in-attacks/

Jun 10

Path traversal flaw in AI dev platform Langflow exploited in attacks: Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal ...

bleepingcomputer.com/news/security/cisa-new-langflow-flaw-actively-exploited-to-hijack-ai-workflows/

Mar 26

CISA: New Langflow flaw actively exploited to hijack AI workflows: The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are ...

securityweek.com/critical-langflow-vulnerability-exploited-hours-after-public-disclosure/

securityweek.com Mar 21

Critical Langflow Vulnerability Exploited Hours After Public Disclosure: A critical Langflow vulnerability leading to unauthenticated remote code execution has ...

bleepingcomputer.com/news/security/critical-langflow-rce-flaw-exploited-to-hack-ai-app-servers/

May 06 25

Critical Langflow RCE flaw exploited to hack AI app servers: The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has tagged a Langflow remote code ...