Sysdig

A skilled human attacker successfully exploited a remote code execution (RCE) vulnerability in Marimo, a popular open-source Jupyter notebook alternative, and gained access to an SSH bastion host in a mere eight seconds.

Researchers at Sysdig have identified a new ransomware strain, dubbed ENCFORGE, that specifically targets files critical to artificial intelligence infrastructure. This ransomware, written in Go, is designed to encrypt essential AI components such as model weights, vector indexes, and training…

Cybersecurity researchers at Sysdig have identified what they claim is the first ransomware attack to be executed entirely by an autonomous AI agent. This AI-driven operation proceeded without any human intervention, meaning no human typed commands or directed individual steps…

A new ransomware campaign named JadePuffer has been orchestrated entirely by an artificial intelligence, representing the first known instance of a large language model (LLM) autonomously conducting a cyberattack. Cloud security firm Sysdig detailed JadePuffer's capabilities in a recent report…

Threat actors have been observed actively probing for and attempting to exploit a critical security vulnerability in Gitea Docker images, identified as CVE-2026-20896. This exploitation activity began approximately 13 days after the vulnerability was disclosed and subsequently patched.

Security firm Sysdig's Threat Research Team has identified what it believes to be the first ransomware attack fully executed by an artificial intelligence agent. This AI operator, dubbed JADEPUFFER, reportedly utilized a large language model to manage the entire attack…