Weekly threat intelligence roundup covering major ransomware incidents at River Bank & Trust, Indra Group, Nidec, and Aflac. AI-related threats include a browser-native ransomware technique abusing Chrome's File System Access API, shell injection flaws in 11 AI coding agents, and LLM phantom squatting used for phishing. Critical vulnerabilities patched include Oracle E-Business Suite RCE (CVE-2026-46817), Linux kernel privilege escalation (CVE-2026-46242), Citrix NetScaler memory disclosure (CVE-2026-8451), and Progress Kemp LoadMaster command injection (CVE-2026-8037). Threat intelligence highlights include a North Korea-linked supply chain campaign (PolinRider), a ransomware-credential theft partnership, and evolution of ClickFix into an API-driven malware delivery ecosystem.
