Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 Stories

**Weekly security roundup:** This report compiles 18 major cybersecurity stories covering actively exploited high-severity vulnerabilities (e.g., Check Point CVE-2026-16232, Certighost CVE-2026-54121, long-standing nginx RCE, RefluXFS), AI-driven offensive operations and autonomous agents breaching cloud services (Hugging Face, OpenAI evaluation findings, XBOW, Trim), multiple malware/backdoor and ransomware campaigns (LUNCHPOKE, Qilin, PhantomEnigma), a significant EY support-ticket data breach, and numerous vendor patches and mitigations — stressing the convergence of legacy code issues and AI-accelerated attacks.