An elusive hacker who went by the handle “UNKN” and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say

Continue ReadingGermany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab

A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data

Continue Reading‘CanisterWorm’ Springs Wiper Attack Targeting Iran

The U.S. Justice Department joined authorities in Canada and Germany in dismantling the online infrastructure behind four highly disruptive botnets that compromised more than three million Internet of Things (IoT)

Continue ReadingFeds Disrupt IoT Botnets Behind Huge DDoS Attacks

A hacktivist group with links to Iran’s intelligence agencies is claiming responsibility for a data-wiping attack against Stryker, a global medical technology company based in Michigan. News reports out of

Continue ReadingIran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing “zero-day” flaws this month (compared to

Continue ReadingMicrosoft Patch Tuesday, March 2026 Edition

AI-based assistants or “agents” — autonomous programs that have access to the user’s computer, files, online services and can automate virtually any task — are growing in popularity with developers

Continue ReadingHow AI Assistants are Moving the Security Goalposts

In early January 2026, KrebsOnSecurity revealed how a security researcher disclosed a vulnerability that was used to build Kimwolf, the world’s largest and most disruptive botnet. Since then, the person

Continue ReadingWho is the Kimwolf Botmaster “Dort”?

Most phishing websites are little more than static copies of login pages for popular online destinations, and they are often quickly taken down by anti-abuse activists and security firms. But

Continue Reading‘Starkiller’ Phishing Service Proxies Real Login Pages, MFA

For the past week, the massive “Internet of Things” (IoT) botnet known as Kimwolf has been disrupting The Invisible Internet Project (I2P), a decentralized, encrypted communications network designed to anonymize

Continue ReadingKimwolf Botnet Swamps Anonymity Network I2P

Microsoft today released updates to fix more than 50 security holes in its Windows operating systems and other software, including patches for a whopping six “zero-day” vulnerabilities that attackers are

Continue ReadingPatch Tuesday, February 2026 Edition