researchers documented what they call the first recorded fully autonomous ai ransomware execution: an agent breached a server, adapted to failed exploits, moved laterally, and encrypted a database with no human intervention. separately a us government entity paid $1m to an extortion group that only threatened to leak stolen data, no encryption involved. together these mark a shift in both who executes attacks and what leverage they use.