Do Son Sysdig documented JADEPUFFER, the first agentic ransomware run end-to-end by an AI agent. It breached Langflow via CVE-2025-3248 and extorted a database.
Nacos
A critical zero-day vulnerability has been identified in Alibaba's Nacos platform, a widely used open-source tool for dynamic service
Nacos versions 1.4.6 and 2.2.3 mainly fix an RCE vulnerability caused by unbounded use of hessian during some Jraft request processing.