Weekly Cybersecurity Roundup; Week of August 28, 2026

Two alleged TeamPCP members were arrested in Australia, marking the end of a supply-chain saga that dominated the summer. A multi-agent AI framework successfully conducted a near-autonomous government intrusion in Taiwan, marking the first publicly confirmed case of its kind. Additionally, Citrix NetScaler remains under active exploitation.

TeamPCP arrests involved two Australians, aged 21 and 23, who were charged over supply-chain attacks hitting over 1,000 organizations, stealing 500,000 credentials, and exfiltrating 300GB of data. The first confirmed near-autonomous AI cyberattack on a government involved eight coordinated AI agents that cracked 85 accounts and stole 2,500+ personnel records.

Citrix NetScaler's CVE-2026-8452, a pre-auth RCE, is currently under active exploitation, with web shells being deployed. The Mirage2FA phishing platform touched 4,532 organizations with adversary-in-the-middle attacks bypassing MFA on Microsoft 365. A breach at ReliaQuest occurred when an employee was phished, granting attackers access to internal dashboards.

In Manchester, the pro-Russian group Server Killers carried out Operation Jackal, resulting in the arrest of 58 individuals involved in large-scale fraud operations.