Former ransomware negotiator sentenced 70 months for BlackCat attacks

Sat, 11 Jul 2026 11:49:48 +0000

Engineer — Skip
SOC/IR — Learn: Insider-threat angle is notable: attacker was a trusted IR professional with access to victim environments, illustrating how responders can become adversaries — relevant context for vetting IR vendors and monitoring privileged access during incidents.
Leader — Learn: The case highlights vendor-risk and insider-threat exposure when engaging external IR firms — useful framing for board discussions on third-party access controls and contractual accountability during incident response engagements.

Blackcat on CuraSec