JadePuffer - the AI that ran a ransomware attack all by itself

A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware attack, "JadePuffer". What does this tell us about the future of cybersecurity?

Also, Apple's "Hide My Email" feature turns out to hide rather less than it promises - despite Apple knowing it has a problem for over a year.

All this and more in this episode of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Zoë Rose.

EPISODE LINKS:

• Politician who investigated spyware abuses had his phone hacked with Pegasus spyware - TechCrunch.
• Hackers breached DHS information-sharing network, people familiar say - Nextgov.
• Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware - Hackread.
• Japanese teen arrested for cyberattack that unsubscribed over 46,000 anime accounts - The Straits Times.
• Police arrest high school student over cyberattack on net cafe operator - The Japan Times.
• Japanese teens arrested for using AI to create illegal phone contracts - The Peninsula Qatar.
• JADEPUFFER: Agentic ransomware for automated database extortion - Sysdig.
• Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses - 404 Media.
• Two people arrested in apparent marriage proposal atop Empire State Building - The Guardian.
• Skywalkers: A Love Story - Netflix.
• Thermomix - Vorwerk.
• Operation Safe Escape.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

SPONSORS:

• Arctic Wolf - See why 1 in 3 IT assets is missing a critical security control. Download the 2026 State of the Cybersecurity Attack Surface report.
• NordLayer - the network security platform for modern teams across different work environments. Use code NLSUMMER26 for up to 20% off annual plans.
• Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy