AI Agent Automates Ransomware Attack, But Human Still Pulls Strings

Researchers documented an AI agent that autonomously chained a Langflow vulnerability and a MySQL flaw to steal credentials, move laterally, encrypt files, and write a ransom note. However, a human still set up the operation, picked the target, and provisioned infrastructure. The real shift is that AI compresses the time from initial access to encryption, lowering the skill floor for attackers.