<p><strong>TLDR:</strong> Sysdig documented JADEPUFFER, what appears to be the first LLM-driven ransomware operation, exploiting CVE-2025-3248 in Langflow to autonomously move laterally and encrypt 1,342 Nacos config items — with an ephemeral AES key that makes recovery impossible even with payment. Separately, the US Supreme Court ruling in Trump v. Slaughter has effectively gutted the legal foundation of the EU-US Data Privacy Framework, with noyb planning a CJEU challenge that could take 2-3 years to resolve. North Korea’s Contagious Interview operation expanded significantly, with Socket’s PolinRider research finding 162 malicious artifacts across 108 packages spanning npm, Go, Packagist, and Chrome extensions. A critical unauthenticated RCE in Langflow (CVE-2026-33017, CVSS 9.8) is also being actively exploited for cryptomining on roughly 7,000 exposed servers — patch to 1.9.0 immediately.</p>
<hr>
<h2>JADEPUFFER: first documented LLM-driven agentic ransomware exploits Langflow CVE-2025-3248</h2>
<p>Sysdig’s threat research team documented an attacker using CVE-2025-3248 (unauthenticated RCE in Langflow) as the entry point, then running an LLM autonomously through reconnaissance, credential harvesting from MinIO and Postgres, lateral movement to a production MySQL/Nacos server, and finally encrypting 1,342 Nacos configuration items and dropping entire database schemas. The AES key was ephemeral and never stored, so victim data is unrecoverable regardless of payment. Evidence of LLM autonomy includes self-narrating payloads with natural-language reasoning and a 31-second failure-diagnosis-and-correction cycle across 600+ distinct payloads. Patch Langflow, harden Nacos defaults, restrict database admin access, and apply egress controls — the same CVE is also being exploited separately for cryptomining on ~7,000 exposed servers. <a href="https://daily.dev/feed-by-ids?id=mbYiBpyQO&amp;id=ETL1OhLb0" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Supreme Court ruling in Trump v. Slaughter dismantles EU-US Data Privacy Framework enforcement mechanism</h2>
<p>The FTC’s independence was the legal backbone cited 259 times in the current EU-US adequacy decision — that independence is now gone. noyb is calling on the European Commission to formally repeal the adequacy decision and begin an orderly exit from US cloud services, and plans to file a CJEU lawsuit, a process expected to take 2-3 years. Companies relying on SCCs and BCRs are also exposed because their transfer impact assessments typically lean on the same now-compromised US executive bodies. The adequacy decision remains formally in force until repealed or annulled, but legal teams should start documenting their exposure now rather than waiting for the Commission to act. <a href="https://daily.dev/posts/BTyOBbN61" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>PolinRider / Contagious Interview supply chain campaign expands to Go, Packagist, and Chrome extensions with 162 malicious artifacts</h2>
<p>Socket’s threat research team found 162 malicious release artifacts across 108 packages, with execution hidden inside VS Code task files and payloads using blockchain RPC infrastructure (TRON, Aptos, BNB Smart Chain) as a resilient dead-drop for encrypted second-stage malware including DEV#POPPER and OmniStealer. Git history is rewritten via force pushes with anti-dated commits, so visible commit history cannot be trusted. JFrog’s parallel research on the same campaign identified two hijacked npm packages and 16 Go packages specifically, with a fake font file (fa-solid-400.woff2) concealing the JavaScript loader. Treat any affected environment as fully compromised, rotate all secrets from a clean machine, audit VS Code tasks, and review GitHub Activity logs rather than commit history. <a href="https://daily.dev/feed-by-ids?id=xKZgY7UCD&amp;id=6HetdRGL4" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Cursor IDE CVE-2026-50548 and CVE-2026-50549: sandbox bypass via prompt injection enables RCE, patched in 3.0</h2>
<p>Cato Networks found two flaws in Cursor IDE — one exploiting a working_directory parameter in run_terminal_cmd to write files outside the project scope, the other abusing a dangerous fallback in symlink canonicalization — both requiring zero prior privileges and triggerable by an innocuous user prompt that ingests a malicious payload from an MCP server or poisoned web search result. Both were patched in Cursor 3.0 in April. Cato notes these are not isolated: they are disclosing similar logic flaws in other popular AI coding agents, pointing to a systemic sandbox isolation problem across agentic tools. <a href="https://daily.dev/posts/FnfY3VrJ6" target="_blank" rel="noopener nofollow">Read more</a></p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Microsoft 365 password-spraying campaign: 81 million attempts, 78 confirmed compromises via ROPC OAuth flow bypassing MFA:</strong> Huntress observed the campaign between June 12-26 across 64 organizations, with attackers authenticating via Azure CLI’s ROPC flow — which sends passwords directly to the token endpoint without triggering interactive MFA — and recorded a 155-fold increase in spraying activity; organizations averaged nearly 2,000 failed login attempts per tenant monthly, with traffic originating from an IPv6 range owned by LSHIY LLC. <a href="https://daily.dev/posts/tNRUt3EAb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CVE-2026-46331 pedit COW: Linux kernel local privilege escalation, CVSS 7.8, affects Ubuntu 18.04 through 25.10:</strong> A published exploit allows local users to gain root on non-container hosts; in container environments it may also enable container escape — mitigate by blocking the act_pedit kernel module via modprobe and regenerating initramfs until kernel patches land, and note Tails 7.9.1 patches this same CVE alongside CVE-2026-43503. <a href="https://daily.dev/feed-by-ids?id=DLyFTc9wG&amp;id=XsfLkPUjS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle E-Business Suite CVE-2026-46817 (CVSS 9.8) actively exploited on honeypots, ~950 instances exposed:</strong> Oracle patched the unauthenticated HTTP takeover flaw in the May 2026 Critical Security Patch Update, but Defused observed active exploitation over the weekend with no public PoC — Shadowserver tracks roughly 950 exposed EBS instances with unknown patch status. <a href="https://daily.dev/posts/Fl9aO0jnr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub ships self-service bulk credential revocation for Enterprise, motivated by Trivy-to-Checkmarx and durabletask supply chain attacks:</strong> Organization owners can now instantly revoke SSO authorizations, PATs, SSH keys, and OAuth tokens in a single action — pre-assign the revocation permission before an incident and pin GitHub Actions to commit SHAs rather than mutable version tags to prevent tag force-push attacks. <a href="https://daily.dev/posts/cII7k9DJr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Adobe patches six unauthenticated RCE flaws in ColdFusion and one in Campaign Classic, all Priority 1 with 72-hour patch window:</strong> ColdFusion versions 2025.9, 2023.20 and earlier are affected; Campaign Classic version 7.4.3 build 9396 and earlier on-premises deployments are affected — Adobe is also moving to twice-monthly security bulletins starting July 14, 2026, citing AI-accelerated vulnerability discovery. <a href="https://daily.dev/posts/s72OsmeFG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>


CVE disclosures, supply-chain attacks, security incidents, and developer-facing security tooling.

Security Digest

Sysdig documented JADEPUFFER, what appears to be the first LLM-driven ransomware operation, exploiting CVE-2025-3248 in Langflow to autonomously move laterally and encrypt 1,342 Nacos config items — with an ephemeral AES key that makes recovery impossible even with payment. Separately, the US Supreme Court ruling in Trump v. Slaughter has effectively gutted the legal foundation of the EU-US Data Privacy Framework, with noyb planning a CJEU challenge that could take 2-3 years to resolve. North Korea's Contagious Interview operation expanded significantly, with Socket's PolinRider research finding 162 malicious artifacts across 108 packages spanning npm, Go, Packagist, and Chrome extensions. A critical unauthenticated RCE in Langflow (CVE-2026-33017, CVSS 9.8) is also being actively exploited for cryptomining on roughly 7,000 exposed servers — patch to 1.9.0 immediately.

JADEPUFFER agentic ransomware hits Langflow, EU-US data transfers thrown into legal limbo