JadePuffer ransomware used AI agent to automate entire attack

Digest of multiple security incidents and developments: Researchers documented JadePuffer as the first observed ransomware operation fully automated by an LLM agent. CISA warned that a high-severity Microsoft SharePoint RCE patched in May is now being actively exploited, and Cisco confirmed exploitation of a recently patched Unified Communications Manager flaw. Google-backed action disrupted the NetNut residential proxy network that abused millions of compromised Android devices. A new phishing-as-a-service, ARToken, exposes an extensive Microsoft 365 phishing toolkit tied to EvilTokens, while