Cybersecurity Roundup: AI Threats, Ransomware Sentencing, and Critical Vulnerabilities This week’s cybersecurity landscape saw significant developments in AI-driven attacks, high-profile legal actions, and critical vulnerabilities across enterprise and consumer technologies. AI and Autonomous Threats Mandiant’s 2026 AI Risk and Resilience Report revealed a shift in attacker tactics, with autonomous AI agents now executing full-scale intrusions. Notable incidents included a hijacked coding assistant spreading a self-propagating worm across 100 repositories and a compromised CI/CD credential enabling real-time debugging of exfiltration tools via an LLM. The report also highlighted a new financial risk: a corrupted accounting agent triggered a runaway reasoning loop, generating 15,000 API calls and $50,000 in cloud costs within an hour. Meanwhile, startup Raindrop secured $35 million in Series A funding to enhance its AI agent monitoring platform, which detects and mitigates silent failures in autonomous systems. Malware and Financial Cybercrime CrowdStrike linked PhantomRaven, an npm-based information stealer, to a financially motivated actor leveraging bug bounty programs. The malware, likely LLM-generated, targets CI/CD environment variables from GitHub Actions, GitLab CI, Jenkins, and CircleCI. Stolen data appears to be used solely for bounty submissions rather than criminal resale. In a major legal victory, five leaders of Nigeria’s Black Axe crime syndicate were extradited from South Africa to the U.S. to face charges for running romance scams and advance-fee fraud schemes targeting American victims between 2011 and 2021. A Swiss court sentenced a Ukrainian ransomware developer to 13 years in prison for creating Lockergoga, MegaCortex, and Nefilim ransomware families linked to $123 million in damages, including attacks on Stadler Rail. The defendant was characterized as a technical consultant rather than the operation’s mastermind. Critical Vulnerabilities and Patches - SAP issued an emergency patch for CVE-2026-44756 (OVERPASS), a maximum-severity flaw in Extended Passport processing that allows unauthenticated attackers to execute remote code before login. The bug affects S/4HANA, NetWeaver, and Business Suite, with exploit details publicly disclosed within 48 hours of the fix. - A WordPress plugin vulnerability in WooCommerce Wholesale Lead Capture enabled mass webshell uploads, with over 100,000 exploit attempts blocked since February. The flaw stems from improper file-type validation, allowing unauthenticated PHP uploads. - TP-Link patched two critical flaws in its Tapo C200 security camera, including an authentication bypass (CVE-2026-15315) that let attackers gain admin access via replayed challenge-response values. - Researchers disclosed Plugin4Shell, a zero-click flaw in AI coding assistants (Claude Code, OpenAI Codex, GitHub Copilot, Gemini CLI) that allows silent plugin takeovers via manipulated Git commits. Anthropic and OpenAI have patched their tools, while Microsoft has yet to address Copilot, and Google will not fix the deprecated Gemini CLI. Government and Cloud Security Guidance NIST and CISA released a joint report detailing defenses against token theft in cloud environments, providing implementation guidance for federal agencies and providers. The report covers token validation, secrets management, and large-scale detection, aligning with Secure by Design principles. The week underscored the escalating sophistication of AI-driven threats, the persistent risks of unpatched software, and the global effort to dismantle cybercriminal networks.