A federal district court in the Southern District of Florida has accepted the guilty pleas of two men to conspiring to obstruct, delay, or affect commerce through extortion in connection with ransomware attacks occurring in 2023. According to court documents, Ryan Goldberg, 40, of Georgia, Kevin Martin, 36, of Texas, and a third, unnamed co-conspirator…
Hackers aren’t kicking down the door anymore. They just use the same tools we use every day — code packages, cloud accounts, email, chat, phones, and “trusted” partners — and turn them against us. One bad download can leak your keys. One weak vendor can expose many customers at once. One guest invite, one link…
The only way to advance AI safety is to increase human interactions, human values and societal governance to promote a reinforced human feedback loop, much like we do with traditional AI training methods. The post Trolley Problem, Safety Versus Security of Generative AI appeared first on SecurityWeek.
In the third of our five-part series, Sophos X-Ops explores the more legally and ethically dubious business interests of financially motivated threat actors
There’s an update to the Netgain ransomware attack incident that was first reported in 2020 and thereafter. CPT Group, Inc., announces a proposed class action settlement in In re Netgain Technology, LLC, Consumer Data Breach Litigation, Case No. 21-cv-1210 (SRN/LIB), United States District Court District of Minnesota. What is this about? Plaintiffs allege that the data incident occurred between September 2020 and November 2020 when an…
Cybersecurity researchers have discovered malware campaigns using the now-prevalent ClickFix social engineering tactic to deploy Amatera Stealer and NetSupport RAT. The activity, observed this month, is being tracked by eSentire under the moniker EVALUSION. First spotted in June 2025, Amatera is assessed to be an evolution of ACR (short for “AcridRain”) Stealer, which was available…
Cybersecurity researchers have disclosed multiple security flaws in SimpleHelp remote access software that could lead to information disclosure, privilege escalation, and remote code execution. Horizon3.ai researcher Naveen Sunkavally, in a technical report detailing the findings, said the “vulnerabilities are trivial to reverse and exploit.” The list of identified flaws is as follows –
