A new documentary series about cybercrime airing next month on HBO Max features interviews with Yours Truly. The four-part series follows the exploits of Julius Kivimäki, a prolific Finnish hacker

Continue ReadingKrebsOnSecurity in New ‘Most Wanted’ HBO Max Series

On July 22, 2025, the European police agency Europol said a long-running investigation led by the French Police resulted in the arrest of a 38-year-old administrator of XSS, a Russian-language cybercrime

Continue ReadingWho Got Arrested in the Raid on the XSS Crime Forum?

Fraudsters are flooding Discord and other social media platforms with ads for hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with

Continue ReadingScammers Unleash Flood of Slick Online Gaming Sites

KrebsOnSecurity recently heard from a reader whose boss’s email account got phished and was used to trick one of the company’s customers into sending a large payment to scammers. An

Continue ReadingPhishers Target Aviation Execs to Scam Customers

On Sunday, July 20, Microsoft Corp. issued an emergency security update for a vulnerability in SharePoint Server that is actively being exploited to compromise vulnerable organizations. The patch comes amid

Continue ReadingMicrosoft Fix Targets Attacks on SharePoint Zero-Day

Security researchers recently revealed that the personal information of millions of people who applied for jobs at McDonald’s was exposed after they guessed the password (“123456”) for the fast food

Continue ReadingPoor Passwords Tattle on AI Hiring Bot Maker Paradox.ai

Marko Elez, a 25-year-old employee at Elon Musk’s Department of Government Efficiency (DOGE), has been granted access to sensitive databases at the U.S. Social Security Administration, the Treasury and Justice

Continue ReadingDOGE Denizen Marko Elez Leaked API Key for xAI

Authorities in the United Kingdom this week arrested four people aged 17 to 20 in connection with recent data theft and extortion attacks against the retailers Marks & Spencer and

Continue ReadingUK Arrests Four in ‘Scattered Spider’ Ransom Group

Microsoft today released updates to fix at least 137 security vulnerabilities in its Windows operating systems and supported software. None of the weaknesses addressed this month are known to be

Continue ReadingMicrosoft Patch Tuesday, July 2025 Edition

In May 2025, the U.S. government sanctioned a Chinese national for operating a cloud provider linked to the majority of virtual currency investment scam websites reported to the FBI. But

Continue ReadingBig Tech’s Mixed Response to U.S. Treasury Sanctions