First LLM-Driven Ransomware Attack Hits Production Database

An attacker used a Langflow vulnerability to steal data and encrypt systems in what researchers call the first complete LLM-driven ransomware attack. The 'agentic threat actor' exploited a flaw in the open-source tool to access a production database server. The incident highlights new risks from AI-powered cyberattacks that can operate autonomously.