Security news.
Today's security news highlights significant legal actions against cybercriminals, ongoing software supply chain attacks, and new guidance on securing AI systems. Two US security experts received prison sentences for aiding a ransomware gang, while CISA released advice for organizations adopting agentic AI.
Two US Security Experts Sentenced for Aiding Ransomware Gang
Ryan Goldberg and Kevin Martin were each sentenced to four years in prison for their role in facilitating BlackCat ransomware attacks.
CISA Releases Guidance on Agentic AI Services
CISA, in collaboration with international partners, published guidance for organizations on the careful adoption of agentic artificial intelligence (AI) systems, outlining key security challenges and risks.
Poisoned Ruby Gems and Go Modules Exploit CI Pipelines
A new software supply chain attack campaign uses "sleeper packages" to push malicious payloads for credential theft, GitHub Actions tampering, and SSH persistence.
Sophisticated Deep#Door Backdoor Enables Espionage
A stealthy Python-based backdoor framework, Deep#Door, deploys a persistent Windows implant likely designed for espionage and disruption.
FBI Warns of Surge in Hacker-Enabled Cargo Theft
The FBI has issued an alert regarding a significant increase in cyber-enabled cargo theft, where criminal enterprises hack brokers and carriers to steal cargo for resale.
1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Intercom
A supply chain attack, dubbed "Mini Shai-Hulud," compromised npm packages for SAP, Lightning, and Intercom, affecting approximately 1,800 targets.
Microsoft Fixes Remote Desktop Warnings Displaying Incorrectly
Microsoft has resolved a known issue where newly introduced Windows security warnings for Remote Desktop (.rdp) files were not displaying correctly.
CISA Adds WebPros cPanel & WHM Vulnerability to KEV Catalog
CISA has added CVE-2026-41940, a WebPros cPanel & WHM and WP2 (WordPress Squared) missing authentication vulnerability, to its Known Exploited Vulnerabilities Catalog due to active exploitation.