Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in its Windows operating systems and software. There are no known “zero-day” or actively exploited vulnerabilities in this

Continue ReadingMicrosoft Patch Tuesday, September 2025 Edition

At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved in

Continue Reading18 Popular Code Packages Hacked, Rigged to Steal Crypto

The chairman of the Federal Trade Commission (FTC) last week sent a letter to Google’s CEO demanding to know why Gmail was blocking messages from Republican senders while allegedly failing

Continue ReadingGOP Cries Censorship Over Spam Filters That Work

The recent mass-theft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many

Continue ReadingThe Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft

Last month, KrebsOnSecurity tracked the sudden emergence of hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited

Continue ReadingAffiliates Flock to ‘Soulless’ Scam Gambling Machine

The cybersecurity community on Reddit responded in disbelief this month when a self-described Air National Guard member with top secret security clearance began questioning the arrangement they’d made with company

Continue ReadingDSLRoot, Proxies, and the Threat of ‘Legal Botnets’

A 20-year-old Florida man at the center of a prolific cybercrime group known as “Scattered Spider” was sentenced to 10 years in federal prison today, and ordered to pay roughly

Continue ReadingSIM-Swapper, Scattered Spider Hacker Gets 10 Years

A 22-year-old Oregon man has been arrested on suspicion of operating “Rapper Bot,” a massive botnet used to power a service for launching distributed denial-of-service (DDoS) attacks against targets —

Continue ReadingOregon Man Charged in ‘Rapper Bot’ DDoS Service

Cybercriminal groups peddling sophisticated phishing kits that convert stolen card data into mobile wallets have recently shifted their focus to targeting customers of brokerage services, new research shows. Undeterred by

Continue ReadingMobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme

Microsoft today released updates to fix more than 100 security flaws in its Windows operating systems and other software. At least 13 of the bugs received Microsoft’s most-dire “critical” rating,

Continue ReadingMicrosoft Patch Tuesday, August 2025 Edition