Unverified50% confidenceEventExact time
Sysdig发布报告分析了一个名为JadePuffer的攻击案例，这是一个完全自主的LLM智能体，能够入侵服务器、窃取凭证、横向移动、加密数据库并留下勒索信
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/14/2026
First Seen
Valid until: 10/12/2026(expired)
Sources
JadePuffer全自动AI勒索攻击实战复盘：智能体武器化时代来临
Related Claims
Unverified安全厂商Sysdig发布报告，捕获并分析了一个被命名为JadePuffer的攻击案例79% similarUnverified该漏洞与供应链攻击结合后，攻击者只需在热门开源包中夹带伪装的git.exe，便可在全球数以万计的Cursor用户机器上无声触发执行71% similarUnverified该漏洞的技术本质是PATH劫持攻击，Cursor执行Git操作时会从项目目录中查找并调用git可执行文件68% similarUnverifiedIn historical reports on mainstream bug bounty platforms such as HackerOne and Bugcrowd, exposed configuration files and .git directories are among the most frequently rewarded high-value vulnerability types.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/509836API
curl https://kongchang.com/api/v1/knowledge/claims/509836MCP
get_claim(id=509836)