Image: Shutterstock. Greg Meland. President Trump last week issued a flurry of executive orders that upended a number of government initiatives focused on improving the nation’s cybersecurity posture. The president

Continue ReadingA Tumultuous Week for Federal Cybersecurity Efforts

The payment card giant MasterCard just fixed a glaring error in its domain name server settings that could have allowed anyone to intercept or divert Internet traffic for the company

Continue ReadingMasterCard DNS Error Went Unnoticed for Years

Residents across the United States are being inundated with text messages purporting to come from toll road operators like E-ZPass, warning that recipients face fines if a delinquent toll fee

Continue ReadingChinese Innovations Spawn Wave of Toll Phishing Via SMS

Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three “zero-day” weaknesses that are already under active attack. Redmond’s inaugural Patch Tuesday

Continue ReadingMicrosoft: Happy 2025. Here’s 161 Security Updates

Besieged by scammers seeking to phish user accounts over the telephone, Apple and Google frequently caution that they will never reach out unbidden to users this way. However, new details

Continue ReadingA Day in the Life of a Prolific Voice Phishing Crew

Federal authorities have arrested and indicted a 20-year-old U.S. Army soldier on suspicion of being Kiberphant0m, a cybercriminal who has been selling and leaking sensitive customer call records stolen earlier

Continue ReadingU.S. Army Soldier Arrested in AT&T, Verizon Extortions

Image: Shutterstock, Dreamansions. KrebsOnSecurity.com turns 15 years old today! Maybe it’s indelicate to celebrate the birthday of a cybercrime blog that mostly publishes bad news, but happily many of 2024’s

Continue ReadingHappy 15th Anniversary, KrebsOnSecurity!

Cybercriminals are selling hundreds of thousands of credential sets stolen with the help of a cracked version of Acunetix, a powerful commercial web app vulnerability scanner, new research finds. The

Continue ReadingWeb Hacking Service ‘Araneida’ Tied to Turkish IT Firm

Image: Shutterstock, iHaMoo. Adam Griffin is still in disbelief over how quickly he was robbed of nearly $500,000 in cryptocurrencies. A scammer called using a real Google phone number to

Continue ReadingHow to Lose a Fortune with Just One Bad Click

A financial firm registered in Canada has emerged as the payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services aimed at Russian-speaking customers, new research finds.

Continue ReadingHow Cryptocurrency Turns to Cash in Russian Banks