Treasury chief says AI bosses, not their bots, will carry the can for criminal acts

The document is a September 2026 security-news roundup covering active exploitation, cybercrime, data breaches, supply-chain attacks, AI-agent abuse, social engineering, espionage, ransomware, and security policy. Notable reports include zero-click attacks against Google Pixel devices, actively exploited critical Cisco flaws, a 0-click RCE affecting AI coding agents, GitLab and JFrog Artifactory vulnerabilities under attack, North Korean fake-job campaigns infecting tens of thousands of devices and targeting crypto wallets, Salt Typhoon activity in Latin America, and malicious bot activity in