Happy 12th Birthday, KrebsOnSecurity.com!

From krebsonsecurity.com 1 year ago in Blogs Security

KrebsOnSecurity.com celebrates its 12th anniversary today! Maybe "celebrate" is too indelicate a word for a year wracked by the global pandemics of COVID-19 and ransomware. Especially since stories about both have helped to grow the audience here tremendously in 2021. But this site's birthday also is a welcome opportunity to...

Articles from Krebs on Security

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware

From krebsonsecurity.com 11 hours ago in Blogs Security

Google says it has suspended the app for the Chinese e-commerce giant Pinduoduo after malware was found in versions of the app. The move comes just weeks after Chinese security researchers published an analysis suggesting the popular e-commerce app sought...

Why You Should Opt Out of Sharing Data With Your Mobile Provider

From krebsonsecurity.com 3 days ago in Blogs Security

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device --...

Feds Charge NY Man as BreachForums Boss “Pompompurin”

From krebsonsecurity.com 5 days ago in Blogs Security

The U.S. Federal Bureau of Investigation (FBI) this week arrested a New York man on suspicion of running BreachForums, a popular English-language cybercrime forum where some of the world biggest hacked databases routinely first show up for sale. The forum's...

Microsoft Patch Tuesday, March 2023 Edition

From krebsonsecurity.com 1 week ago in Blogs Security

Microsoft on Tuesday released updates to quash at least 74 security bugs in its Windows operating systems and software. Two of those flaws are already being actively attacked, including an especially severe weakness in Microsoft Outlook that can be exploited...

Two U.S. Men Charged in 2022 Hacking of DEA Portal

From krebsonsecurity.com 1 week ago in Blogs Security

Two U.S. men have been charged with hacking into a U.S. Drug Enforcement Agency (DEA) online portal that taps into 16 different federal law enforcement databases. Both are alleged to be part of a larger criminal organization that specializes in...

Who’s Behind the NetWire Remote Access Trojan?

From krebsonsecurity.com 2 weeks ago in Blogs Security

A Croatian national has been arrested for allegedly operating NetWire, a Remote Access Trojan (RAT) marketed on cybercrime forums since 2012 as a stealthy way to spy on infected systems and siphon passwords. The arrest coincided with a seizure of...

Sued by Meta, Freenom Halts Domain Registrations

From krebsonsecurity.com 2 weeks ago in Blogs Security

The domain name registrar Freenom, whose free domain names have long been a draw for spammers and phishers, has stopped allowing new domain name registrations. The move comes just days after the Dutch registrar was sued by Meta, which alleges...

Highlights from the New U.S. Cybersecurity Strategy

From krebsonsecurity.com 3 weeks ago in Blogs Security

The Biden administration today issued its vision for beefing up the nation's collective cybersecurity posture, including calls for legislation establishing liability for software products and services that are sold with little regard for security. The White House's new national cybersecurity...

Hackers Claim They Breached T-Mobile More Than 100 Times in 2022

From krebsonsecurity.com 3 weeks ago in Blogs Security

Three different cybercriminal groups claimed access to internal networks at communications giant T-Mobile in more than 100 separate incidents throughout 2022, new data suggests. In each case, the goal of the attackers was the same: Phish T-Mobile employees for access...

When Low-Tech Hacks Cause High-Impact Breaches

From krebsonsecurity.com 3 weeks ago in Blogs Security

Web hosting giant GoDaddy made headlines this month when it disclosed that a multi-year breach allowed intruders to steal company source code, siphon customer and employee login credentials, and foist malware on customer websites. Media coverage understandably focused on GoDaddy's...