JadePuffer ransomware used AI agent to automate entire attack

This collection highlights an uptick in high-impact cyber activity: researchers documented what appears to be the first ransomware operation (JadePuffer) fully automated by an LLM agent; Google-partnered takedown of the NetNut residential proxy network that had ~2M compromised Android devices; exposure of ARToken PhaaS revealing EvilTokens’ Microsoft 365 phishing toolkit; widespread MFA/OAuth bypass techniques (ConsentFix, ClickFix) and mitigations such as Opera’s Paste Protect; active exploitation of enterprise vulnerabilities including a Microsoft SharePoint RCE (actively exploited per CISA)