a single threat actor used agentic ai to compromise an enterprise cloud environment at unusual speed, while a separate assessment of the jadepuffer ransomware — initially believed fully ai-autonomous — was revised to show persistent human involvement in key phases. taken together: offensive ai autonomy is real but still human-steered, and the gap between claimed autonomy and actual autonomy is itself moving. the same agentic capability being sold as productivity is being field-tested as a weapon.