For nearly a dozen years, residents of South Carolina have been kept in the dark by state and federal investigators over who was responsible for hacking into the state’s revenue

Continue ReadingWho Stole 3.6M Tax Records from South Carolina?

The U.S. government is warning that “smart locks” securing entry to an estimated 50,000 dwellings nationwide contain hard-coded credentials that can be used to remotely open any of the locks.

Continue ReadingCrickets from Chirp Systems in Smart Lock Key Leak

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said today it is investigating a breach at business intelligence company Sisense, whose products are designed to allow companies to view the

Continue ReadingWhy CISA is Warning CISOs About a Breach at Sisense

On April 9, Twitter/X began automatically modifying links that mention “twitter.com” to read “x.com” instead. But over the past 48 hours, dozens of new domain names have been registered that

Continue ReadingTwitter’s Clumsy Pivot to X.com Is a Gift to Phishers

If only Patch Tuesdays came around infrequently — like total solar eclipse rare — instead of just creeping up on us each month like The Man in the Moon. Although

Continue ReadingApril’s Patch Tuesday Brings Record Number of Fixes

A cybercrook who has been setting up websites that mimic the self-destructing message service privnote.com accidentally exposed the breadth of their operations recently when they threatened to sue a software

Continue ReadingFake Lawsuit Threat Exposes Privnote Phishing Sites

Roughly nine years ago, KrebsOnSecurity profiled a Pakistan-based cybercrime group called “The Manipulaters,” a sprawling web hosting network of phishing and spam delivery platforms. In January 2024, The Manipulaters pleaded

Continue Reading‘The Manipulaters’ Improve Phishing, Still Fail at Opsec

Thread hijacking attacks. They happen when someone you know has their email account compromised, and you are suddenly dropped into an existing conversation between the sender and someone else. These

Continue ReadingThread Hijacking: Phishes That Prey on Your Curiosity

Several Apple customers recently reported being targeted in elaborate phishing attacks that involve what appears to be a bug in Apple’s password reset feature. In this scenario, a target’s Apple

Continue ReadingRecent ‘MFA Bombing’ Attacks Targeting Apple Users

The nonprofit organization that supports the Firefox web browser said today it is winding down its new partnership with Onerep, an identity protection service recently bundled with Firefox that offers

Continue ReadingMozilla Drops Onerep After CEO Admits to Running People-Search Networks