A prolific data ransom gang that calls itself Scattered Lapsus ShinyHunters (SLSH) has a distinctive playbook when it seeks to extort payment from victim firms: Harassing, threatening and even swatting

Continue ReadingPlease Don’t Feed the Scattered Lapsus ShinyHunters

The cybercriminals in control of Kimwolf — a disruptive botnet that has infected more than 2 million devices — recently shared a screenshot indicating they’d compromised the control panel for

Continue ReadingWho Operates the Badbox 2.0 Botnet?

A new Internet-of-Things (IoT) botnet called Kimwolf has spread to more than 2 million devices, forcing infected systems to participate in massive distributed denial-of-service (DDoS) attacks and to relay other

Continue ReadingKimwolf Botnet Lurking in Corporate, Govt. Networks

Microsoft today issued patches to plug at least 113 security holes in its various Windows operating systems and supported software. Eight of the vulnerabilities earned Microsoft’s most-dire “critical” rating, and

Continue ReadingPatch Tuesday, January 2026 Edition

Our first story of 2026 revealed how a destructive new botnet called Kimwolf has infected more than two million devices by mass-compromising a vast number of unofficial Android TV streaming

Continue ReadingWho Benefited from the Aisuru and Kimwolf Botnets?

The story you are reading is a series of scoops nestled inside a far more urgent Internet-wide security advisory. The vulnerability at issue has been exploited for months already, and

Continue ReadingThe Kimwolf Botnet is Stalking Your Local Network

KrebsOnSecurity.com celebrates its 16th anniversary today! A huge “thank you” to all of our readers — newcomers, long-timers and drive-by critics alike. Your engagement this past year here has been

Continue ReadingHappy 16th Birthday, KrebsOnSecurity.com!

Direct navigation — the act of visiting a website by manually typing a domain name in a web browser — has never been riskier: A new study finds the vast

Continue ReadingMost Parked Domains Now Serving Malicious Content

Microsoft today pushed updates to fix at least 56 security flaws in its Windows operating systems and supported software. This final Patch Tuesday of 2025 tackles one zero-day bug that

Continue ReadingMicrosoft Patch Tuesday, December 2025 Edition