JadePuffer ransomware used AI agent to automate entire attack

Collection of security reports highlighting a surge in high-impact, automated and large-scale attacks: researchers say JadePuffer is likely the first documented ransomware operation run end-to-end by an LLM agent; NetNut, a residential proxy network built from ~2 million compromised Android devices and smart TVs, was disrupted; a new ARToken phishing-as-a-service exposes an extensive Microsoft 365 phishing toolkit tied to EvilTokens. CISA and vendors warn of active exploitation of recently patched high-severity flaws (Microsoft SharePoint RCE; Cisco Unified CM), while ConsentFix/ClickFix OAuth