AI Weakly #10 - "AI wrote the ransomware. A Microsoft-signed driver killed your EDR. .Your EDR is blind. Your kernel is compromised. Your dependencies are weaponized.Three vectors. Zero defenses ready."
AI Weakly is the weekly newsletter for those who make decisions on AI and security without time to waste. Every Tuesday: the facts that matter without the noise.
Issue #10
Top Story —
Week 28 marks a critical escalation in attack sophistication: JadePuffer became the first end-to-end LLM-driven ransomware attack, GodDamn ransomware exploited Microsoft-signed kernel drivers to disable endpoint security, and a compromised npm package deployed a Rust infostealer during installation. Simultaneously, Progress Software disclosed a credible threat to ShareFile deployments requiring immediate server shutdowns, while a 15-year-old Linux kernel flaw (GhostLock) enables root access on virtually all enterprise distributions. These incidents expose three converging attack vectors—AI framework weaponization, driver-based security bypass, and supply chain compromise—that existing defenses are unprepared to counter.
Weakly Digest —
01 —
JadePuffer: The First Complete LLM-Driven Ransomware Attack
🟣 AI/Identity/Supply Chain - Active Exploitation
An autonomous AI agent exploited a Langflow vulnerability to conduct end-to-end ransomware operations including data exfiltration and encryption in production. This is the first documented LLM-driven ransomware incident, demonstrating weaponization of AI framework vulnerabilities by agentic threat actors.
EDITOR’S NOTE
This is not theoretical. AI framework vulnerabilities now represent active ransomware attack surface. Immediately audit Langflow deployments, restrict agent execution permissions, and implement air-gapped testing environments for AI workflows. Add LLM framework vulnerabilities to your zero-day monitoring priorities alongside traditional endpoint threats.
02 —
'GodDamn' Ransomware Uses BYOVD to Smite US Companies
🔴 Critical/Active Exploitation
A new ransomware variant exploits a Microsoft-signed kernel driver to disable security software via BYOVD (Bring Your Own Vulnerable Driver) technique. The attack directly bypasses endpoint protections, creating security blind spots during active encryption and exfiltration.
EDITOR’S NOTE
BYOVD attacks are now mainstream ransomware tradecraft. Your EDR/AV is being weaponized against itself. Mandate kernel driver attestation policies, implement driver-level integrity monitoring, and assume endpoint protection WILL fail during active attack. Focus incident response on network-level detection and isolation as your primary defense layer.
03 —
Progress Urges ShareFile Admins to Shut Down Servers Over 'Credible' Threat
🔴 Critical/Active Exploitation
Progress Software issued urgent directive for ShareFile Storage Zone Controller shutdown due to credible external security threat with active incident response ongoing. Organizations using on-premises ShareFile deployments face immediate data exposure and operational disruption risk.
EDITOR’S NOTE
This is an active incident, not a vulnerability announcement. If you run ShareFile Storage Zone Controllers on-premises, treat this as a security event requiring immediate executive decision-making. Shut down affected systems, capture network logs for forensics, and assume data exfiltration has occurred pending investigation. Contact Progress incident response team immediately for containment guidance.
04 —
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
🟣 Supply Chain/Active Exploitation
Version 8.14.0 of jscrambler npm package was compromised and deployed cross-platform Rust infostealer via preinstall hooks affecting Windows, macOS, and Linux. Malicious payload was detected within minutes but represents critical supply chain vulnerability window.
EDITOR’S NOTE
Your software bill of materials is now an attack surface. If jscrambler is in your dependency tree, assume credential compromise across all development environments. Mandate npm package verification (checksums, code review) pre-deployment and implement post-installation scanning of preinstall/postinstall hooks. Rotate all credentials for systems where jscrambler was installed.
05 —
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros
🔴 Critical/Active Exploitation
CVE-2026-43499 (GhostLock) is a 15-year-old Linux kernel privilege escalation affecting virtually all mainstream distributions since 2011. Any logged-in user achieves root access and container escape without special permissions, creating critical risk across enterprise infrastructure and Kubernetes deployments.
EDITOR’S NOTE
This vulnerability has likely been exploited for years undetected. Patch immediately across all Linux servers and container hosts—this is not a theoretical risk. Prioritize systems running AI/ML workloads and critical infrastructure. Implement kernel audit logging to detect exploitation attempts post-patch. Assume insider threat risk is elevated until patches are deployed; monitor privilege escalation attempts across all systems.
Also worth reading —
AI Gateways Offer Attackers the Keys to the Kingdom — Audit AI gateway access controls and treat them as critical authentication infrastructure.
Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours — AI-augmented cloud attacks are compressing breach timelines—review AWS credential hygiene and workflow permissions immediately.
'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows — Disable GitHub agentic workflows on public repositories until you audit secret exposure risk.
CitrixBleed-ing Again? NetScaler Vulnerability Under Active Attack — NetScaler PoCs are public—patch or air-gap these gateways before they become ransomware entry points.