The Cyber Express Weekly Roundup: Renfe Confirms Breach, Australia Warns of Hijacked AI Keys, and Europol Sounds the Alarm on AI-Driven Crime

This weekly roundup describes several active cybersecurity incidents: Renfe customer names and emails exposed via compromised Adif servers; Australian warnings that stolen AI API keys and hijacked AI services are being abused to burn credits and pivot to systems; a Medyc SQL injection that exfiltrated patient PII (including national IDs) over multiple weeks; phishing campaigns that lure victims into installing MSP360 and then deploy ScreenConnect for backup access; and Europol’s assessment that AI and autonomous agents are accelerating and scaling criminal activity. The report emphasizes protecting AI credentials, detecting legitimate remote-access tools used maliciously, and strengthening vendor/supplier security.