From a HubSpot U-turn to the first documented case of a fully autonomous ransomware operation by AI agents, here are extracts from this week’s most popular news stories.
“We Made a Mistake” – HubSpot Reverses Customer Data Enrichment Plan
Last week, HubSpot updated its terms of service to allow enrichment data to be shared across customer accounts.
The policy covered business contact details, employer information, and email deliverability signals.
However, the most consequential aspect of the CRM giant’s move was the decision to set opt-out as the default setting, meaning customers were automatically enrolled unless they manually took action to remove themselves.
Just four days later, the company had scrapped the plan entirely.
The backlash was loud and fast. Most of it played out on LinkedIn, where CRM users, sales leaders, and RevOps professionals made their frustrations clear.
Brent Leary, a Partner at CRM Essentials, summed up much of the indignation in his succinct response to the news:
“Damn… What was HubSpot thinking with this.”
Caitlin O. Bigelow, CMO at Blazel, was more detailed in her condemnation of HubSpot’s decision, claiming that the company had “truly lost their way,” and she was cutting ties after 15 years as a customer (Read more...).
First Fully Autonomous AI Ransomware Campaign Raises the Stakes for Enterprise Cybersecurity
Cybersecurity researchers have identified the first documented case of a fully autonomous ransomware operation by AI agents, marking what could become a significant turning point for enterprise cyber resilience.
According to cloud cybersecurity firm Sysdig’s Threat Research Team (TRT), an AI-powered threat actor it has named JADEPUFFER conducted an end-to-end ransomware campaign without evidence of direct human intervention during the attack. Rather than relying on a traditional operator manually directing each stage, the campaign used a large language model (LLM) to execute reconnaissance, credential theft, lateral movement, persistence, privilege escalation and ransomware deployment.
The attack exploited CVE-2025-3248, a remote code execution vulnerability affecting Langflow, an open-source framework used to build LLM-powered applications and AI workflows. From an exposed Langflow instance, the agent moved through the victim’s environment before targeting a production database server. As Michael Clark, Director of Threat Research at Sysdig, explained in a blog post:
“JADEPUFFER is considered an agentic threat actor (ATA), or an operator whose attack capability is delivered by an AI agent rather than a human-driven toolkit.”