Agentic Ransomware JADEPUFFER Uses Base64 Python Payloads to Harvest Cloud and API Keys

JADEPUFFER is a newly documented, fully autonomous ransomware operation that used an AI agent via a Langflow unauthenticated code-execution flaw to deliver Base64-encoded Python payloads, harvest cloud and API credentials (including Langflow-stored keys), move laterally to MinIO and Nacos/MySQL, create persistent beacons, and irreversibly encrypt and drop database records while leaving a ransom demand; the report includes exploited CVEs, IoCs, and defensive recommendations.