Two US Security Experts Sentenced to Prison for Helping Ransomware Gang

A batch of SecurityWeek stories highlights a broad threat landscape: two U.S. security experts were each sentenced to four years for aiding a ransomware gang; researchers disclosed a stealthy Python-based Deep#Door Windows backdoor likely used for espionage and disruption; and attackers abused Hugging Face and ClawHub to socially engineer malware distribution. Supply-chain attacks (Mini Shai‑Hulud) compromised SAP/Lightning/Intercom npm packages via a malicious preinstall hook, and SonicWall urged immediate patching of firewall flaws that can bypass controls. The FBI warned of rising hacker‑a­