Show Notes
A complete attack chain run by an AI agent – with zero human hands on the keyboard.
JadePuffer is the first AI-driven threat actor to execute a ransomware attack end-to-end – autonomously prioritizing targets, adapting in real time to exploit vulnerabilities, and harvesting sensitive data for extortion.
Join Matt and David as they break down what made this attack possible – and why JadePuffer pushes independent AI threat actors from science fiction into real-world operation.
Plus: In our Voices from the Frontlines segment, Threat Labs research Dolev Taler shares his team’s discovery of SearchLeak, the one-click Copilot exploit that turns an AI assistant into a data exfiltration tool.
More from State of Cybercrime
ShinyHunters claims it stole 2-3 TB of FBI data and shared a sample with researchers containing information on employees, applicants, and even family members.
If your company runs PTC Windchill, Cl0p may already have your blueprints.
The supply chain remains the weakest link. A new automated malware campaign dubbed “Megalodon” poisoned more than 5,500 GitHub repos in just six hours, quietly harvesting cloud credentials, tokens, and sensitive code from environments that implicitly trust what they pull.
275 million users across 9,000 institutions. The #shinyhunters breach of Instructure – the company behind the widely used Canvas LMS – has allegedly exposed 3.6TB of data, making it one of the largest education-sector breaches in history.