Make No Mistakes: Inside the First "Agentic Ransomware"

Does adaptive malware prove an LLM is directing an attack, or can a capable script produce the same evidence? Chris Romeo, Izar Tarandach, and Matt Coles examine Sysdig's JADEPUFFER report and its claim of agentic ransomware. They work through the proposed indicators, including self-narrating payloads, rapid failure diagnosis, interpretation of natural-language context, and a reused Bitcoin address. The debate distinguishes plausible autonomy from proof and asks whether machine-speed adaptation changes how defenders describe their attackers. Beneath the argument about agency is a familiar exposure: an unpatched Langflow vulnerability. The hosts return to threat modeling, patching, and the danger of treating an old security failure as a completely new problem just because AI is involved.

Mentioned in this Episode:
➜ Sysdig: JADEPUFFER — Agentic ransomware for automated database extortion

Chapters:
00:00:00 - Intro: AI as automated attacker
00:00:54 - What makes ransomware agentic?
00:04:09 - Adaptive agent or branching script?
00:08:25 - Walking through the database exploit
00:11:32 - Does this change the threat model?
00:16:12 - Evidence one: self-narrating code
00:20:27 - Evidence two: failure diagnosis and correction
00:26:20 - Evidence three: natural-language context
00:28:08 - Evidence four: the payment address
00:32:04 - Repeatable behavior and model defaults
00:36:02 - Patching and compatibility tradeoffs
00:40:14 - Old scripts and new attackers
00:41:35 - The recurring lesson: patch
00:42:24 - Closing thoughts

Follow AI Security Table:

➜ Home: https://securitytable.ai/

➜ X: https://x.com/SecTablePodcast

➜ LinkedIn: https://www.linkedin.com/company/ai-security-table/

➜ YouTube: https://www.youtube.com/@AISecurityTable