This week's cybersecurity roundup covers a range of significant developments, including a Ukrainian ransomware developer receiving a nearly 13-year prison sentence in Switzerland for his role in creating the Lockergoga, MegaCortex, and Nefilim ransomware families, and a critical maximum-severity SAP vulnerability (CVE-2026-44756) that allows unauthenticated remote code execution, prompting urgent emergency patching advisories. Mandiant's new AI risk report highlights a growing trend of attackers using autonomous AI agents to conduct full intrusions, while researchers disclosed Plugin4Shell, a zero-click flaw affecting major AI coding tools including Claude Code and GitHub Copilot that enables silent malicious plugin updates. Additional stories cover mass exploitation of a WordPress plugin flaw, TP-Link camera authentication bypasses, Black Axe cybercrime leaders extradited to the US, and new NIST/CISA guidance on cloud token theft defenses.
