In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

Summary

SecurityWeek's weekly roundup covers several stories: Raindrop raised $35 million for AI agent monitoring, and Mandiant's 2026 AI risk report describes attackers letting autonomous agents run intrusions. A Zurich court sentenced a Ukrainian IT specialist to nearly 13 years for developing the Lockergoga, MegaCortex, and Nefilim ransomware families, with prosecutors estimating about $123 million in damages. The verdict remains subject to appeal.

Topics

• AI agents

Related items

• MediumCVE-2026-127202: MLflow path traversal through model_id in the log outputs APISimilar attack · NVD/CVE Database
• LowAI chatbots are recommending fake retail websites, study findsSimilar attack · The Verge (AI)
• MediumPalo Alto tracks a massive Chinese AI attack that sadly lives up to industry fearsSimilar attack · CSO Online
• MediumAttackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society SectorsSimilar attack · Palo Alto Unit 42
• MediumCVE-2026-126994: braindecode model config deserialization flaw via activation argumentSimilar attack · NVD/CVE Database