Sweden Blames Pro-Russian Group for Cyberattack Last Year on Its Energy Infrastructure

This collection of SecurityWeek stories highlights multiple high-impact threats and developments: Sweden publicly attributes a cyberattack on energy infrastructure (heating plant) to a pro‑Russian group; attackers are actively exploiting a critical remote takeover vulnerability in the Nginx UI management tool (CVE-2026-33032); researchers disclose a design flaw in Anthropic’s Model Context Protocol (MCP) that can execute unsanitized commands and enable widespread AI supply‑chain compromise; a coordinated campaign of ~100 malicious Chrome extensions is stealing user data and opening backdoors;