Ukrainian Coder Sentenced; Plugin4Shell and SAP RCE

A Zurich court has sentenced a Ukrainian IT specialist to nearly 13 years in prison for developing ransomware used in extortion campaigns. Researchers disclosed Plugin4Shell, a repository-based exploit that can hijack AI coding agents. Separately, SAP warned that CVE-2026-44756 enables unauthenticated remote code execution against multiple products.

The Zurich verdict identifies the defendant as the lead developer behind the Lockergoga, MegaCortex and Nefilim ransomware families. The court described his role as closer to a technical consultant than the operation’s mastermind. Prosecutors estimated roughly $123 million in total damages tied to the campaign, which included attacks on companies such as Stadler Rail. The sentence is subject to appeal.

Plugin4Shell is a supply-chain flaw that affects several AI coding assistants and command-line tools, including Claude Code, OpenAI Codex, GitHub Copilot and the Gemini CLI. The flaw allows an attacker who controls a plugin’s repository to replace a previously pinned, reviewed commit with malicious code without failing a SHA-pinning check. An attacker can create a branch whose name matches the pinned hash so git resolves to the malicious branch, and agents that perform background auto-updates can pull the altered plugin into installed instances with no user action. That behavior can let an attacker deliver a compromise to agents that run code or plugins.

Anthropic and OpenAI issued fixes for Claude Code and Codex. Microsoft has not yet patched Copilot. Google has said it will not fix the deprecated Gemini CLI. Security practitioners note that the technique can bypass protections that rely on commit pinning or review records, and that the risk rises where agents have wide access to developer environments, CI/CD pipelines or production systems. Industry reporting has documented incidents in which attackers escalated from prompting chatbots to running autonomous agents, including a compromised coding assistant that spread a self-propagating worm across about 100 repositories and a case where stolen CI/CD credentials were used with a large language model to develop exfiltration tools.

SAP issued an emergency advisory for CVE-2026-44756, which the vulnerability finder named OVERPASS. The bug is in SAP’s Extended Passport processing code and can trigger memory corruption before any login checks occur. Independent researchers replicated the issue in laboratory tests and demonstrated remote code execution over HTTP/HTTPS and NGRFC. The vulnerability affects S/4HANA, NetWeaver and Business Suite. SAP urged operators to apply available patches immediately to internet-facing systems and warned that public technical write-ups released after the patch can lower the bar for exploit development.

Mitigations include restricting which repositories plugins may be sourced from, disabling automatic background updates for agent plugins where feasible, and adding verification steps that confirm deployed code matches the reviewed artifact. For SAP installations, operators are advised to apply patches to exposed systems and scan for indicators of compromise.

The three items reported here cover a criminal sentence for a developer tied to known ransomware families, a supply-chain technique that undermines commit-pinning defenses in AI development tools, and a critical unauthenticated remote code execution flaw in widely used enterprise software.