New details are emerging about a breach at National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone

Continue ReadingNational Public Data Published Its Own Passwords

A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a little-known but aptly-named

Continue ReadingNationalPublicData.com Hack Exposes a Nation’s Data

Microsoft today released updates to fix at least 90 security vulnerabilities in Windows and related software, including a whopping six zero-day flaws that are already being actively exploited by attackers.

Continue ReadingSix 0-Days Lead Microsoft’s August 2024 Patch Push

A partial selfie posted by Punchmade Dev to his Twitter account. Yes, that is a functioning handheld card skimming device, encrusted in diamonds. Underneath that are more medallions, including a

Continue ReadingCybercrime Rapper Sues Bank over Fraud Investigation

A ransomware group called Dark Angels made headlines this past week when it was revealed the crime group recently received a record $75 million data ransom payment from a Fortune

Continue ReadingLow-Drama ‘Dark Angels’ Reap Record Ransoms

Twenty-four prisoners were freed today in an international prisoner swap between Russia and Western countries. Among the eight Russians repatriated were several convicted cybercriminals. In return, Russia has reportedly released

Continue ReadingU.S. Trades Cybercriminals to Russia in Prisoner Swap

More than a million domain names — including many registered by Fortune 100 firms and brand protection companies — are vulnerable to takeover by cybercriminals thanks to authentication weaknesses at

Continue ReadingDon’t Let Your Domain Name Become a “Sitting Duck”

Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that to impersonate a domain holder

Continue ReadingCrooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

The Chinese company in charge of handing out domain names ending in “.top” has been given until mid-August 2024 to show that it has put in place systems for managing

Continue ReadingPhish-Friendly Domain Registry “.top” Put on Notice

A faulty software update from cybersecurity vendor Crowdstrike crippled countless Microsoft Windows computers across the globe today, disrupting everything from airline travel and financial institutions to hospitals and businesses online.

Continue ReadingGlobal Microsoft Meltdown Tied to Bad Crowdstrike Update