Two high-disruption attacks this week, one purely destructive and one ransomware-driven, expose a defender blind spot: triage frameworks built around extortion mechanics will miss a growing share of the highest-impact incidents.
JADEPUFFER's autonomous ransomware kill chain is not a technology milestone; it is a business model event, and the business model it disrupts is the one defenders have been building their response assumptions around for a decade.
GhostApproval exposed a symlink trust-boundary flaw across six AI coding assistants simultaneously, and the four different vendor responses reveal something more important than the vulnerability: there is no shared security contract governing what these tools are allowed to do.
AI workflow platforms are being deployed with developer-speed patching and no orchestration-layer instrumentation, and attackers have started treating them as production attack surfaces.
The first confirmed autonomous LLM agent attack, a critical auth bypass in the Python framework underpinning most MCP infrastructure, and two AI platforms under active exploitation this week represent a structural shift: AI attack surface is not emerging, it is operational.
Four AI infrastructure platforms (Langflow, Marimo, LMDeploy, Flowise) were exploited within 24 hours of vulnerability disclosure last week. The patching window has collapsed to under one attacker shift.
Security