Last week, researchers at cloud security company Sysdig said they had documented the first known case of “client ransomware.” It was an extortion operation, dubbed JadePuffer, in which an AI agent — not a human — would technically execute a real-world cyberattack from start to finish. The agent compromised a vulnerable server, stole credentials, navigated the target’s network, encrypted files, and even wrote its own ransom note, adapting to obstacles along the way like a human hacker would. Coverage described the finance as being run “without any human oversight,” with “no human at the keyboard.”

This is not quite Full image. in interview

langflo

إحدى التفاصيل التي بدت في البداية وكأنها تعكر الصورة، تم توضيحها منذ ذلك الحين. Clark told CyberScoop that Sysdig found “multiple models were used in the attack,” citing the combined keys of OpenAI, Anthropic, DeepSeek, and Gemini — language that left open the question of whether multiple models were effectively powering different stages of the hack. When asked to clarify, Clark told TechCrunch that those keys were just part of what the customer stole, and not evidence of a motive.

McDonald’s post also warned that ransomware campaigns are now primarily limited by the attacker’s budget rather than human effort, raising the potential for “thousands or tens of thousands of simultaneous campaigns.” من الصعب قليلاً التوفيق بين هذا القلق وبين ما وصفه كلارك يوم الاثنين. (إذا كان لا يزال يتعين على الإنسان اختيار كل ضحية، وتوفير البنية التحتية، والحصول على بيانات اعتماد قاعدة البيانات لكل عملية، فهذا يمثل عنق الزجاجة، على الأقل).