Security Brief: AI-Assisted Ransomware, Agent Security Funding and Mexico’s Cyber Plan
Summary
A security-news roundup covers a ransomware operation involving AI agents, new funding and acquisitions in security, Robinhood’s passkey-based access approvals, and Mexico’s plans to strengthen national cybersecurity.
Key points
- Sysdig said JADEPUFFER exploited an exposed Langflow instance via CVE-2025-3248, then used AI agents to encrypt Nacos configuration items; a human selected the victim, provisioned infrastructure, and supplied credentials.
- Anthropic sued Abnormal AI over alleged unfair competition and trademark infringement. Abnormal’s CEO says the company registered abnormal.ai before Anthropic existed and has used its slash-based wordmark since 2021.
- Robinhood says its passkey-based Secure Enhanced Remote Approval system lets developers approve access without a VPN or managed laptop and cut approval time by 20%.
- Mexico’s 2025–2030 cybersecurity plan calls for national coordination, a cybersecurity law, a cyber operations center, CSIRT coordination, critical-infrastructure identification, and federal vulnerability assessment.
- Straiker raised $64 million for its AI agent security platform, and Runlayer raised $30 million for governance and controls for AI agents, MCP servers, and AI clients.
- The roundup also notes Aikido’s acquisition of Root, Barracuda’s acquisition of Evo Security, and Nebulock’s $25 million funding round.
Article Details
- Event Type
- Cybersecurity news roundup covering a lawsuit over AI branding, an AI-assisted ransomware incident, security product and company announcements, funding, acquisitions, and cybersecurity planning.
- Impact
- Sysdig reported that JADEPUFFER exploited an exposed Langflow instance through CVE-2025-3248, then pivoted to production MySQL and Nacos servers. It encrypted 1,342 Nacos configuration items, deleted original configuration and history tables, and created a ransom note. The article says a human selected the victim, provisioned infrastructure, and supplied database credentials; the AI agents performed the remaining actions. Other reported impacts include Robinhood’s claim that its SERA process reduced access-approval time by 20%, and planned investment in Mexican critical-infrastructure security.
CVE
People
AndyRunlayer CEO, referenced by the newsletter author; surname not provided.Ankur ShahStraiker co-founder; previously SVP and GM of Prisma Cloud at Palo Alto Networks, according to the article.Anton ChuvakinCommented on redesigning SOC processes before adding AI agents.Darwin SalazarAuthor of The Cybersecurity Pulse newsletter.Sreenath KurupatiStraiker co-founder; previously an Akamai AI and security research lead, according to the article.
Malware
Vendors
Abnormal AIAnthropic filed a public lawsuit against Abnormal AI on July 1, claiming unfair competition and trademark infringement over Abnormal’s slash-based AI branding. Abnormal’s CEO wrote a blog post here detailing their sideAikido SecurityAikido Security acquired Root add software supply chain patching into its platform. Root generates CVE patches for package versions teams already run, while Aikido is launching patched drop-in libraries and containerAnthropic⚖️ Anthropic sues Abnormal: Abnormal says it used abnormal.ai and the slash wordmark before Anthropic existed.BarracudaBarracuda buys Evo Security for MSP identityIntruderPlus: Runlayer raises $30M, Aikido acquires Root, Nebulock raises $25M, MSP identity consolidates, poisoned MCP tools keep being annoying, and Intruder adds a free exposure-management onramp.JamfJamf enables AI Governance and shadow AI detection on MacMicrosoftMicrosoft warns poisoned MCP tool descriptions can make AI agents leak dataNebulockPlus: Runlayer raises $30M, Aikido acquires Root, Nebulock raises $25M, MSP identity consolidates, poisoned MCP tools keep being annoying, and Intruder adds a free exposure-management onramp.Recorded FutureRecorded Future says Mexico’s 2025–2030 National Cybersecurity Plan is trying to formalize national cyber coordination after years of ransomware, fraud, hacktivism, data theft, and state-linked activity. The past 5Robinhood🪪 Robinhood fixes approvals: SERA speeds up passkey-based approvals for incident response and sensitive access.RunlayerPlus: Runlayer raises $30M, Aikido acquires Root, Nebulock raises $25M, MSP identity consolidates, poisoned MCP tools keep being annoying, and Intruder adds a free exposure-management onramp.Straiker🤖 Straiker raises $64M: Straiker raised a Series A for AI agent discovery, testing, and runtime protection.SysdigSysdig says JADEPUFFER hit an exposed Langflow instance through CVE-2025-3248, then pivoted into a production MySQL and Nacos server. The agent encrypted 1,342 Nacos configuration items, dropped original config andWizBuild AI Security Agents with Wiz MCP
Products
BarracudaONEBarracuda says Evo will expand BarracudaONE with privileged access management, access control, identity protection, and identity threat detection and response.LangflowSysdig says JADEPUFFER hit an exposed Langflow instance through CVE-2025-3248, then pivoted into a production MySQL and Nacos server. The agent encrypted 1,342 Nacos configuration items, dropped original config andMCPPlus: Runlayer raises $30M, Aikido acquires Root, Nebulock raises $25M, MSP identity consolidates, poisoned MCP tools keep being annoying, and Intruder adds a free exposure-management onramp.MySQLsays JADEPUFFER hit an exposed Langflow instance through CVE-2025-3248, then pivoted into a production MySQL and Nacos server. The agent encrypted 1,342 Nacos configuration items, dropped original config and historyNacoshit an exposed Langflow instance through CVE-2025-3248, then pivoted into a production MySQL and Nacos server. The agent encrypted 1,342 Nacos configuration items, dropped original config and history tables,Prisma Cloudbefore they get real permissions. The company was founded by Ankur Shah, former SVP and GM of Prisma Cloud at Palo Alto Networks, and Sreenath Kurupati, former Akamai AI and security research lead.SERA🪪 Robinhood fixes approvals: SERA speeds up passkey-based approvals for incident response and sensitive access.