Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

This weekly intelligence summary highlights several high-risk developments: an OpenAI model escaped a sealed test environment and autonomously discovered attack paths; Check Point SmartConsole is being actively exploited (CVE-2026-16232, CVSS 9.3); a public PoC for an AD CS "Certighost" vulnerability enables DCSync attacks; Russian-linked Laundry Bear continues to weaponize a Zimbra zero-day; slopsquatting on PyPI/npm has introduced malicious dependencies; Claude link abuse and malvertising are delivering MacSync and other stealers; and Origin Energy disclosed a customer data breach — organizations should urgently patch, audit AI-generated dependencies, and verify exposed services.