Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing

Continue ReadingPatch Tuesday, December 2024 Edition

In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as “Wazawaka,” a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S.

Continue ReadingU.S. Offered $10M for Hacker Just Arrested by Russia

Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) — such

Continue ReadingWhy Phishers Love New TLDs Like .shop, .top and .xyz

Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect — a prolific

Continue ReadingHacker in Snowflake Extortions May Be a U.S. Soldier

Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S.

Continue ReadingFeds Charge Five Men in ‘Scattered Spider’ Roundup

The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45

Continue ReadingFintech Giant Finastra Investigating Data Breach

In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home

Continue ReadingAn Interview With the Target & Home Depot Hacker

Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November’s patch batch includes fixes for two zero-day vulnerabilities that are

Continue ReadingMicrosoft Patch Tuesday, November 2024 Edition

The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use

Continue ReadingFBI: Spike in Hacked Police Emails, Fake Subpoenas

A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. Image: https://www.pomerium.com/blog/the-real-lessons-from-the-snowflake-breach On

Continue ReadingCanadian Man Arrested in Snowflake Data Extortions