SIOUX FALLS – United States Attorney Alison J. Ramsdell announced today that U.S. Chief Judge Roberto A. Lange has sentenced a Lebanon, Indiana, man convicted of Conspiracy to Commit Wire Fraud and Conspiracy to Launder Monetary Instruments. The sentencing took place on February 6, 2025. Evan Frederick Light, age 22, was sentenced to 20 years…
The insider threat problem will worsen, and the solutions will widen, in the age of generative-AI. The post Insider Threat: Tackling the Complex Challenges of the Enemy Within appeared first on SecurityWeek.
Cybersecurity researchers have uncovered a new stealthy backdoor concealed within the “mu-plugins” directory in WordPress sites to grant threat actors persistent access and allow them to perform arbitrary actions. Must-use plugins (aka mu-plugins) are special plugins that are automatically activated on all WordPress sites in the installation. They are located in the “wp-content/mu-plugins”
A federal district court in the Southern District of Florida has accepted the guilty pleas of two men to conspiring to obstruct, delay, or affect commerce through extortion in connection with ransomware attacks occurring in 2023. According to court documents, Ryan Goldberg, 40, of Georgia, Kevin Martin, 36, of Texas, and a third, unnamed co-conspirator……
Christopher Brown reports: Flagstar Bank NA agreed to pay $31.5 million to settle allegations it failed to protect the personal information of nearly 2.2 million people in data breaches linked to Accellion Inc.’s file-transfer software. Class members would be eligible for up to $25,000 in documented monetary losses, three years of credit monitoring services, and……
Adobe has warned of a critical security flaw in its Commerce and Magento Open Source platforms that, if successfully exploited, could allow attackers to take control of customer accounts. The vulnerability, tracked as CVE-2025-54236 (aka SessionReaper), carries a CVSS score of 9.1 out of a maximum of 10.0. It has been described as an improper…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has shed light on a new malware called RESURGE that has been deployed as part of exploitation activity targeting a now-patched security flaw in Ivanti Connect Secure (ICS) appliances. “RESURGE contains capabilities of the SPAWNCHIMERA malware variant, including surviving reboots; however, RESURGE contains distinctive commands that
