• Search for:
    11 Nov, 2020
    Patch Tuesday, November 2020 Edition
    Cybersecurity , , , , , , , , , , , ,

    Adobe and Microsoft each issued a bevy of updates today to plug critical security holes in their software. Microsoft’s release includes fixes for 112 separate flaws, including one zero-day vulnerability that is already being exploited to attack Windows users. Microsoft also is taking flak for changing its security advisories and limiting the amount of information disclosed about each bug. …

    Read MorePatch Tuesday, November 2020 Edition

    9 Nov, 2020
    Body Found in Canada Identified as Neo-Nazi Spam King
    Cybersecurity , , , , , ,

    The body of a man found shot inside a burned out vehicle in Canada three years ago has been identified as that of Davis Wolfgang Hawke, a prolific spammer and neo-Nazi who led a failed anti-government march on Washington, D.C. in 1999, according to news reports. …

    Read MoreBody Found in Canada Identified as Neo-Nazi Spam King

    4 Nov, 2020
    Why Paying to Delete Stolen Data is Bonkers
    Cybersecurity , , , ,

    Companies hit by ransomware often face a dual threat: Even if they avoid paying the ransom and can restore things from scratch, about half the time the attackers also threaten to release sensitive stolen data unless the victim pays for a promise to have the data deleted. Leaving aside the notion that victims might have any real expectation the attackers will actually destroy the stolen data, new research suggests a fair number of victims who do pay up may see some or all of the stolen data published anyway. …

    Read MoreWhy Paying to Delete Stolen Data is Bonkers

    3 Nov, 2020
    Two Charged in SIM Swapping, Vishing Scams
    Cybersecurity , , , , , , , ,

    Two young men from the eastern United States have been hit with identity theft and conspiracy charges for allegedly stealing bitcoin and social media accounts by tricking employees at wireless phone companies into giving away credentials needed to remotely access and modify customer account information. …

    Read MoreTwo Charged in SIM Swapping, Vishing Scams

    3 Nov, 2020
    Two Charged in SIM Swapping, Vishing Scams
    Cybersecurity , , , , , , , ,

    Two young men from the eastern United States have been hit with identity theft and conspiracy charges for allegedly stealing bitcoin and social media accounts by tricking employees at wireless phone companies into giving away credentials needed to remotely access and modify customer account information. …

    Read MoreTwo Charged in SIM Swapping, Vishing Scams

    29 Oct, 2020
    FBI, DHS, HHS Warn of Imminent, Credible Ransomware Threat Against U.S. Hospitals
    Cybersecurity , , , , , , , , , , ,

    On Monday, Oct. 27, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems at hundreds of hospitals, clinics and medical care facilities across the United States. Today, officials from the FBI and the U.S. Department of Homeland Security hastily assembled a conference call with healthcare industry executives warning about an “imminent cybercrime threat to U.S. hospitals and healthcare providers.” …

    Read MoreFBI, DHS, HHS Warn of Imminent, Credible Ransomware Threat Against U.S. Hospitals

    28 Oct, 2020
    Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo
    Cybersecurity , , , , , , , , , , , ,

    In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of clients globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. …

    Read MoreSecurity Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

    28 Oct, 2020
    Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo
    Cybersecurity , , , , , , , , , , , ,

    In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of clients globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. …

    Read MoreSecurity Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo