CISA Order Highlights Persistent Risk at Network Edge – Krebs on Security
The U.S. government agency in charge of improving the nation’s cybersecurity posture is ordering all federal civilian agencies to take new measures to restrict access…
Category: Krebson
Microsoft Patch Tuesday, June 2023 Edition – Krebs on Security
Microsoft Corp. today released software updates to fix dozens of security vulnerabilities in its Windows operating systems and other software. This month’s relatively light patch…
Barracuda Urges Replacing — Not Patching — Its Email Security Gateways – Krebs on Security
It’s not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected…
Service Rents Email Addresses for Account Signups – Krebs on Security
One of the most expensive aspects of any cybercriminal operation is the time and effort it takes to constantly create large numbers of new throwaway…
Real Crooks Sign Their Malware – Krebs on Security
Code-signing certificates are supposed to help authenticate the identity of software publishers, and provide cryptographic assurance that a signed piece of software has not been…
Discord Admins Hacked by Malicious Bookmarks – Krebs on Security
A number of Discord communities focused on cryptocurrency have been hacked this past month after their administrators were tricked into running malicious Javascript code disguised…
Phishing Domains Tanked After Meta Sued Freenom – Krebs on Security
The number of phishing websites tied to domain name registrar Freenom dropped precipitously in the months surrounding a recent lawsuit from social networking giant Meta,…
Interview With a Crypto Scam Investment Spammer – Krebs on Security
Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. What follows is an interview with…
Russian Hacker “Wazawaka” Indicted for Ransomware – Krebs on Security
A Russian man identified by KrebsOnSecurity in January 2022 as a prolific and vocal member of several top ransomware groups was the subject of two…
Re-Victimization from Police-Auctioned Cell Phones – Krebs on Security
Countless smartphones seized in arrests and searches by police forces across the United States are being auctioned online without first having the data on them…
Microsoft Patch Tuesday, May 2023 Edition – Krebs on Security
Microsoft today released software updates to fix at least four dozen security holes in its Windows operating systems and other software, including patches for two…
Feds Take Down 13 More DDoS-for-Hire Services – Krebs on Security
The U.S. Federal Bureau of Investigation (FBI) this week seized 13 domain names connected to “booter” services that let paying customers launch crippling distributed denial-of-service…