# JadePuffer - the AI that ran a ransomware attack all by itself

Page: https://stenobird.com/podcast/smashing-security-453614/jadepuffer-the-ai-that-ran-a-ransomware-attack-all-by-itself
Text version: https://stenobird.com/podcast/smashing-security-453614/jadepuffer-the-ai-that-ran-a-ransomware-attack-all-by-itself.md
Podcast: [Smashing Security](https://stenobird.com/podcast/smashing-security-453614)
Published: 2026-07-08T23:00:03+00:00
Episode link: https://www.smashingsecurity.com/475
Audio file: https://audio4.redcircle.com/episodes/15a54f66-0ddf-4d60-b5f2-e913bdff638d/stream.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/smashing-security-453614/episodes/jadepuffer-the-ai-that-ran-a-ransomware-attack-all-by-itself
Duration seconds: 2787

## Resource

A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware attack, "JadePuffer". What does this tell us about the future of cybersecurity? Also, Apple's "Hide My Email" feature turns out to hide rather less than it promises - despite Apple knowing it has a problem for over a year. All this and more in this episode of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Zoë Rose. EPISODE LINKS: Politician who investigated spyware abuses had his phone hacked with Pegasus spyware - TechCrunch. Hackers breached DHS information-sharing network, people familiar say - Nextgov. Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware - Hackread. Japanese teen arrested for cyberattack that unsubscribed over 46,000 anime accounts - The Straits Times. Police arrest high school student over cyberattack on net cafe operator - The Japan Times. Japanese teens arrested for using AI to create illegal phone contracts - The Peninsula Qatar. JADEPUFFER: Agentic ransomware for automated database extortion - Sysdig. Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses - 404 Media. Two people arrested in apparent marriage proposal atop Empire State Building - The Guardian. Skywalkers: A Love Story - Netflix. Thermomix - Vorwerk. Operation Safe Escape . Smashing Security merchandise (t-shirts, mugs, stickers and stuff) SPONSORS: Arctic Wolf - See why 1 in 3 IT assets is missing a critical security control. Download the 2026 State of the Cybersecurity Attack Surface report. NordLayer - the network security platform for modern teams acro…

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/smashing-security-453614/episodes/jadepuffer-the-ai-that-ran-a-ransomware-attack-all-by-itself/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/smashing-security-453614/jadepuffer-the-ai-that-ran-a-ransomware-attack-all-by-itself.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.