AI Security Table
AI Security Table is a candid roundtable podcast with Chris Romeo, Izar Tarandach, and Matt Coles about securing AI systems and how AI changes software security.
We debate AI agents, secure development, threat modeling, emerging attacks, and the decisions security teams face as AI becomes part of everyday work.
Formerly The Security Table. Same hosts, same conversations, a sharper focus on AI security. The full episode archive remains available.
AI security. On the table.
https://securitytable.ai
AI Security Table
Make No Mistakes: Inside the First "Agentic Ransomware"
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
Does adaptive malware prove an LLM is directing an attack, or can a capable script produce the same evidence? Chris Romeo, Izar Tarandach, and Matt Coles examine Sysdig's JADEPUFFER report and its claim of agentic ransomware. They work through the proposed indicators, including self-narrating payloads, rapid failure diagnosis, interpretation of natural-language context, and a reused Bitcoin address. The debate distinguishes plausible autonomy from proof and asks whether machine-speed adaptation changes how defenders describe their attackers. Beneath the argument about agency is a familiar exposure: an unpatched Langflow vulnerability. The hosts return to threat modeling, patching, and the danger of treating an old security failure as a completely new problem just because AI is involved.
Mentioned in this Episode:
➜ Sysdig: JADEPUFFER — Agentic ransomware for automated database extortion
Chapters:
00:00:00 - Intro: AI as automated attacker
00:00:54 - What makes ransomware agentic?
00:04:09 - Adaptive agent or branching script?
00:08:25 - Walking through the database exploit
00:11:32 - Does this change the threat model?
00:16:12 - Evidence one: self-narrating code
00:20:27 - Evidence two: failure diagnosis and correction
00:26:20 - Evidence three: natural-language context
00:28:08 - Evidence four: the payment address
00:32:04 - Repeatable behavior and model defaults
00:36:02 - Patching and compatibility tradeoffs
00:40:14 - Old scripts and new attackers
00:41:35 - The recurring lesson: patch
00:42:24 - Closing thoughts
Follow AI Security Table:
➜ Home: https://securitytable.ai/
➜ X: https://x.com/SecTablePodcast
➜ LinkedIn: https://www.linkedin.com/company/ai-security-table/
➜ YouTube: https://www.youtube.com/@AISecurityTable
People on this episode
Podcasts we love
Check out these other fine podcasts recommended by us, not an algorithm.
The Application Security Podcast
Chris Romeo and Robert Hurlbut