The Good, the Bad and the Ugly in Cybersecurity – Week 39 (2026)

This report summarizes three active and high-impact incidents: (1) the sentencing of an alleged Ryuk initial-access specialist tied to large ransomware campaigns and significant ransom payments; (2) TraderTraitor (UNC4899) operations targeting developer endpoints and software supply chains via fake job-interview lures and malicious Terraform providers to deploy macOS backdoors (FLATROOF, ROOFDECK); and (3) a financially motivated, AI-driven mass skimming campaign that compromised over 100 e-commerce sites and exfiltrated more than 600,000 credit card records using autonomous scanning, exploitation, and skimmer deployment.