<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Insider-Threat on Juan Carlos Munera</title><link>https://cybersecpro.me/tags/insider-threat/</link><description>Recent content in Insider-Threat on Juan Carlos Munera</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© 2026 Juan Carlos Munera</copyright><lastBuildDate>Fri, 01 May 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://cybersecpro.me/tags/insider-threat/index.xml" rel="self" type="application/rss+xml"/><item><title>When the Negotiator Is on Both Sides of the Table: Rethinking IR Trust After the BlackCat Sentencings</title><link>https://cybersecpro.me/posts/ir-firm-insider-threat-trust-architecture/</link><pubDate>Fri, 01 May 2026 00:00:00 +0000</pubDate><guid>https://cybersecpro.me/posts/ir-firm-insider-threat-trust-architecture/</guid><description>On April 30, 2026, two former incident response professionals were sentenced to four years in federal prison each for conducting BlackCat ransomware attacks against U.S. companies. One had been an IR manager at a well-known IR firm. The other had been a ransomware negotiator at a separate well-known firm. The case forces a question most organizations have never seriously asked: what is the actual control model for the people you call when everything is on fire?</description></item></channel></rss>