At least a dozen organizations with domain names at domain registrar Squarespace saw their websites hijacked last week. Squarespace bought all assets of Google Domains a year ago, but many

Continue ReadingResearchers: Weak Security Defaults Enabled Squarespace Domains Hijacks

AT&T Corp. disclosed today that a new data breach has exposed phone call and text message records for roughly 110 million people — nearly all of its customers. AT&T said

Continue ReadingCrooks Steal Phone, SMS Records for Nearly All AT&T Customers

The Russia-based cybercrime group dubbed “Fin7,” known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year

Continue ReadingThe Stark Truth Behind the Resurgence of Russia’s Fin7

Microsoft Corp. today issued software updates to plug at least 139 security holes in various flavors of Windows and other Microsoft products. Redmond says attackers are already exploiting at least

Continue ReadingMicrosoft Patch Tuesday, July 2024 Edition

Most accomplished cybercriminals go out of their way to separate their real names from their hacker handles. But among certain old-school Russian hackers it is not uncommon to find major

Continue ReadingThe Not-So-Secret Network Access Broker x999xx

On March 8, 2024, KrebsOnSecurity published a deep dive on the consumer data broker Radaris, showing how the original owners are two men in Massachusetts who operated multiple Russian language

Continue ReadingKrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp,

Continue ReadingAlleged Boss of ‘Scattered Spider’ Hacking Group Arrested

Microsoft today released updates to fix more than 50 security vulnerabilities in Windows and related software, a relatively light Patch Tuesday this month for Windows users. The software giant also

Continue ReadingPatch Tuesday, June 2024 “Recall” Edition

Law enforcement agencies in the United States and Europe today announced Operation Endgame, a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware.

Continue Reading‘Operation Endgame’ Hits Malware Delivery Platforms

The U.S. Department of Justice (DOJ) today said they arrested the alleged operator of 911 S5, a ten-year-old online anonymity service that was powered by what the director of the

Continue ReadingIs Your Computer Part of ‘The Largest Botnet Ever?’