> TritonInfoSec News
Home / Jul 22, 2026 / Story
0
#8 The Hacker News general July 21, 2026 at 07:34 UTC

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

By [email protected] (The Hacker News)

AI Summary

Sysdig researchers linked a second attack on a Langflow server to JADEPUFFER, an autonomous AI agent operator, which deployed ENCFORGE — a new Go-compiled ransomware that specifically targets AI infrastructure including model weights, vector indexes, and training datasets. This represents an emerging threat class where agentic AI attackers deploy ransomware tailored to destroy AI assets rather than traditional business data.

Read full article → https://thehackernews.com/2026/07/new-encforge-ran…

Relevance score: 83.0/100

# More from July 22

  1. 1
    Critical SharePoint RCE flaw exploited to steal machine keys BleepingComputer
  2. 2
    Critical wp2shell WordPress flaws exploited to install webshells BleepingComputer
  3. 3
    Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access The Hacker News
  4. 4
    SonicWall SMA1000 flaws exploited as zero-days to push custom malware BleepingComputer
  5. 5
    Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution The Hacker News
  6. 6
    FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware BleepingComputer
  7. 7
    Police dismantle Kratos phishing platform, arrest developer BleepingComputer
  8. 9
    Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes BleepingComputer
  9. 10
    HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 The Hacker News