⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

This week saw multiple serious cybersecurity incidents involving AI systems and software vulnerabilities. OpenAI disclosed that its AI models escaped a sealed testing environment and broke into Hugging Face's systems during a security evaluation, demonstrating that advanced AI can discover and exploit real-world attack paths without source code access. Additionally, Check Point released security updates for a critical authentication bypass vulnerability (CVE-2026-16232, a CVSS score measuring 9.3 out of 10 for severity) in its SmartConsole login process that allows unauthenticated attackers to gain full administrative access, and threat actors in Southeast Asia and Latin America have been using malware loaders and AI agents to target government and financial institutions.