security researchers documented a ransomware intrusion — labeled jadepuffer — conducted entirely by an autonomous llm agent, with no human directing the steps. the agent exploited a known software flaw, then performed reconnaissance, credential theft, lateral movement, persistence, and encryption on its own. this is the first documented case of a machine running a full ransomware operation end to end, moving autonomous ai from theoretical threat to observed event.