JadePuffer - the AI that ran a ransomware attack all by itself

A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware attack, "JadePuffer". What does this tell us about the future of cybersecurity?

Also, Apple's "Hide My Email" feature turns out to hide rather less than it promises - despite Apple knowing it has a problem for over a year.

All this and more in this episode of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Zoë Rose.

EPISODE LINKS:

Politician who investigated spyware abuses had his phone hacked with Pegasus spyware - TechCrunch.Hackers breached DHS information-sharing network, people familiar say - Nextgov.Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware - Hackread.Japanese teen arrested for cyberattack that unsubscribed over 46,000 anime accounts - The Straits Times.Police arrest high school student over cyberattack on net cafe operator - The Japan Times.Japanese teens arrested for using AI to create illegal phone contracts - The Peninsula Qatar.JADEPUFFER: Agentic ransomware for automated database extortion - Sysdig.Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses - 404 Media.Two people arrested in apparent marriage proposal atop Empire State Building - The Guardian.Skywalkers: A Love Story - Netflix.Thermomix - Vorwerk.Operation Safe Escape.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

SPONSORS:

Arctic Wolf - See why 1 in 3 IT assets is missing a critical security control. Download the 2026 State of the Cybersecurity Attack Surface report.NordLayer - the network security platform for modern teams across different work environments. Use code NLSUMMER26 for up to 20% off annual plans.Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.