Ransom Cartel ransomware creator sentenced to 16 years in prison

Security news digest covering ransomware criminal sentencing, Snowflake data theft, actively exploited vulnerabilities, phishing and adversary-in-the-middle campaigns, macOS and developer supply-chain malware, compromised marketplace extensions and npm packages, cloud and Microsoft 365 account attacks, and emerging AI-agent security risks. The most urgent items include CISA-listed exploitation, remote-code-execution vulnerabilities, large-scale software supply-chain compromise, and campaigns targeting enterprise credentials and data.