Sysdig says an "agentic threat actor" it calls JadePuffer exploited CVE-2025-3248 in an Internet-facing Langflow deployment, pivoted to a production MySQL and Nacos server, exfiltrated data, deleted the database and left an extortion note. Sysdig calls it the first documented end-to-end ransomware operation executed autonomously by an LLM, its payloads helpfully annotated with their own reasoning.
A woman from Lichtenberg in Saxony lost more than one million euros after an AI-faked clip of ZDF talk show "Markus Lanz", in which a supposed financial expert touted a linked investment, led her to a site called Investhub 3.0, Chemnitz police said. A purported broker talked her into an initial investment of just under 250 euros; over months one transfer exceeded 460,000 euros.
Spain's National Police have placed three under-age boys in Molina de Segura under investigation for child pornography and offences against privacy and moral integrity, accusing them of using AI apps to create and circulate fake sexualised nude images of girls from their school. The case, opened after the girls' parents complained, has gone to Murcia's juvenile prosecutor.
Tokyo police on July 6 arrested a 15-year-old suspected of sending false commands to Bandai Namco Filmworks' servers on Nov. 4, 2025, deregistering 46,812 Bandai Channel accounts. He reportedly admitted it, saying he asked ChatGPT to finish his slow withdrawal code in another language, and allegedly changed his IP address 30 times after being blocked.
The Delhi High Court granted actor and BJP MP Ravi Kishan interim protection on July 6, barring defendants including "John Doe" parties from exploiting his name, image or likeness through AI or deepfakes and ordering removal of URLs allegedly carrying obscene and AI-generated content. If they fail to comply within three days, Meta, Google and X must act on his notice within 72 hours.
Coinbase's AI-generated news system sent users an alert on Sunday reporting that Norway had beaten Brazil 3-2 in a World Cup knockout match, Erling Haaland scoring twice, before the game had started. Norway did go on to win 2-1, with two Haaland goals, prompting executive Max Branzburg, who said the story was fixed, to suggest "maybe the AI knew something we didn't."
An AI-generated video using a synthetic face and voice of former fast bowler Shoaib Akhtar falsely announced that Pakistan cricket legend Wasim Akram had died of a heart attack, and spread rapidly on social media. His wife answered with a fresh video of Akram working out in a gym, confirming he is well.
A proposed class action filed July 6, 2026 alleges Walmart's automated AI voice system captures, stores and uses the voiceprints of Illinois residents who phone its stores, without disclosure, consent or a written retention policy, in violation of the Illinois Biometric Information Privacy Act. The complaint calls the voiceprint mention in Walmart's privacy policy "inadequate" notice.
