The first fully agentic ransomware attack bypassed human execution by programmatically exploiting a Langflow vulnerability, escalating privileges, and writing its own ransom note, but it still required a human operator to provision the infrastructure, select the target, and feed it stolen credentials. This shift means security teams must immediately prioritize securing the development orchestration tools of their LLM stacks, as agents can now move from an initial compromise to full database encryption and data exfiltration in seconds. Ultimately, this proves that while frontier safety filters prevent direct malicious use, attackers are successfully weaponizing open-weight models to automate the execution of complex, multi-stage cyberattacks once inside a network.