Agentic Hacker Exploits Langflow RCE to Encrypt AI and Machine-Learning Infrastructure
Tue Jul 21 2026
Malware
Ransomware
Vulnerability
cyberpress.org
JADEPUFFER, an agentic ransomware operation, has evolved from database extortion into a targeted campaign against AI and machine-learning infrastructure. The operator exploited the Langflow remote code execution flaw tracked as CVE-2025-3248 and deployed a purpose-built ransomware tool called ENCFORGE to encrypt model checkpoints, vector databases, training data, and AI deployment artifacts. CVE-2025-3248 is a missing-authentication […]
The post Agentic Hacker Exploits Langflow RCE to Encrypt AI and Machine-Learning Infrastructure appeared first on Cyber Security News.