Fake Investor John Bernard Sinks Norwegian Green Shipping Dreams

From krebsonsecurity.com 4 months ago in Blogs Security

Several articles here have delved into the history of John Bernard, the pseudonym used by a fake billionaire technology investor who's tricked dozens of start-ups into giving him tens of millions of dollars. Bernard's latest victim -- a Norwegian startup hoping to build a fleet of environmentally friendly shipping vessels...

Articles from Krebs on Security

Senators Urge FTC to Probe ID.me Over Selfie Data

From krebsonsecurity.com 23 hours ago in Blogs Security

Some of more tech-savvy Democrats in the U.S. Senate are asking the Federal Trade Commission (FTC) to investigate identity-proofing company ID.me for "deceptive statements" the company and its founder allegedly made over how they handle facial recognition data collected on...

When Your Smart ID Card Reader Comes With Malware

From krebsonsecurity.com 2 days ago in Blogs Security

Millions of U.S. government employees and contractors have been issued a secure smart ID card that enables physical access to buildings and controlled spaces, and provides access to government computer networks and systems at the cardholder's appropriate security level. But...

DEA Investigating Breach of Law Enforcement Data Portal

From krebsonsecurity.com 1 week ago in Blogs Security

The U.S. Drug Enforcement Administration (DEA) says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is tied to a cybercrime...

Microsoft Patch Tuesday, May 2022 Edition

From krebsonsecurity.com 1 week ago in Blogs Security

Microsoft today released updates to fix at least 74 separate security problems in its Windows operating systems and related software. This month's patch batch includes fixes for seven "critical" flaws, as well as a zero-day vulnerability that affects all supported...

Your Phone May Soon Replace Many of Your Passwords

From krebsonsecurity.com 2 weeks ago in Blogs Security

Apple, Google and Microsoft announced this week they will soon support an approach to authentication that avoids passwords altogether, and instead requires users to merely unlock their smartphones to sign in to websites or online services. Experts say the changes...

Russia to Rent Tech-Savvy Prisoners to Corporate IT?

From krebsonsecurity.com 2 weeks ago in Blogs Security

Faced with a brain drain of smart people fleeing the country following its invasion of Ukraine, the Russian Federation is floating a new strategy to address a worsening shortage of qualified information technology experts: Forcing tech-savvy people within the nation's...

You Can Now Ask Google to Remove Your Phone Number, Email or Address from Search Results

From krebsonsecurity.com 3 weeks ago in Blogs Security

Google said this week it is expanding the types of data people can ask to have removed from search results, to include personal contact information like your phone number, email address or physical address. The move comes just months after...

Fighting Fake EDRs With ‘Credit Ratings’ for Police

From krebsonsecurity.com 3 weeks ago in Blogs Security

When KrebsOnSecurity last month explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media and technology providers, many security experts called it a fundamentally unfixable problem. But don't...

Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code

From krebsonsecurity.com 4 weeks ago in Blogs Security

KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ cybercrime group in the week leading up to the arrest of its most active members last month. The logs show LAPSUS$ breached T-Mobile multiple times...

Conti’s Ransomware Toll on the Healthcare Industry

From krebsonsecurity.com 1 month ago in Blogs Security

Conti -- one of the most ruthless and successful Russian ransomware groups -- publicly declared during the height of the COVID-19 pandemic that it would refrain from targeting healthcare providers. But new information confirms this pledge was always a lie,...