Host
krebsonsecurity.com
43 links, first saved April 27, 2015, latest May 29, 2025.
About the host
- Registered
- November 23, 2009 with Tucows Domains Inc.; expires November 23, 2026
- KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS – Krebs on Security
The scale of these DDoS attacks is incredible. All these insecure devices becoming zombies is a huge threat.
- Whistleblower: DOGE Siphoned NLRB Case Data – Krebs on Security
A friend shared a podcast with me about this same case that I listened to. Krebs presents it well here. This certainly looks like a security event where data was exfiltrated from…
- Trump Revenge Tour Targets Cyber Leaders, Elections – Krebs on Security
I don't think we appreciate how critical our cyber defenses are. We give it a nod, but we need to consider these organizations and leaders on the same level as our physical…
- Trump 2.0 Brings Cuts to Cyber, Consumer Protections – Krebs on Security
This marks the US Government as one of the very, very few organizations I've heard decreasing their investment in cybersecurity.
- An Interview With the Target & Home Depot Hacker – Krebs on Security
This is an incredible look behind the curtain of the lives and occupations of these hackers that wreck havoc all over the place. Shefel acknowledged that his outreach was…
- Change Healthcare Breach Hits 100M Americans – Krebs on Security
The scope of this breach is incredible. In April, Change estimated the breach would affect a "substantial proportion of people in America." On Oct 22, the healthcare giant…
- The Global Surveillance Free-for-All in Mobile Ad Data – Krebs on Security
Very detailed read on how location data is being captured by data brokers and being used in so many different ways. It is a good read to understand why you need to be mindful of…
- Stark Industries Solutions: An Iron Hammer in the Cloud – Krebs on Security
Great research from Krebs highlighting one of the largest hosting providers supporting malicious groups attacking other services. Worth a read just to get a sense of how criminal…
- Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers – Krebs on Security
So X has decided that they really want people to start saying X and not saying Twitter anymore. Someone tells a developer to make that happen. So they start replacing…
- BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare – Krebs on Security
This ransomware attack is a big deal, and interesting that they seem to have actually paid the ransom. On March 1, a cryptocurrency address that security researchers had already…
- U.S. Internet Leaked Years of Internal, Customer Emails – Krebs on Security
I was shocked to see a headline from Krebs that referenced my own ISP - U.S. Internet ! The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called…
- Few Fortune 100 Firms List Security Pros in Their Executive Ranks – Krebs on Security
- Discord Admins Hacked by Malicious Bookmarks – Krebs on Security
Complicated and nasty attack pattern against Discord communities. Discord is like the bar in Star Wars. You need to be extra, extra careful anytime you are in a Discord group.…
- A Closer Look at the LAPSUS$ Data Extortion Group – Krebs on Security
Hacking into systems can be hard, so this group just buys credentials from insiders. 🔐
- The Internet is Held Together With Spit & Baling Wire
It is incredible that MAIL-FROM was ever considered a valid means of authenticating a message between the operators running the backbones connecting the internet. It is an…
- What Happened to Facebook, Instagram, & WhatsApp? – Krebs on Security
Facebook and it’s properties went offline for a while and everyone lost their mind. It is striking when the biggest of Internet operations has a critical issue like this.
- ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users – Krebs on Security
Thanks to Have I Been Pwned? I know that my information was contained in this breach. This is a pretty bad one and the passwords were definitely taken as well. If you are a…
- At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software — Krebs on Security
This is one of the biggest vulnerabilities to be exploited in recent years, and the impact is big. In each incident, the intruders have left behind a “web shell,” an easy-to-use,…
- Who’s Behind Monday’s 14-State 911 Outage? — Krebs on Security
Minnesota was impacted by this 911 outage. It was highly suspicious that it was at the same time as a major Azure outage. However, it sounds like it wasn't related. Intrado did…
- Ukraine Nabs Suspect in 773M Password ‘Megabreach’ — Krebs on Security
Cool to see Ukraine in the news for catching a cybercriminal. The Security Service of Ukraine (SBU) on Tuesday announced the detention of a hacker known as Sanix (a.k.a.…
- Who’s Behind the “Reopen” Domain Surge? — Krebs on Security
Interesting connections here. It doesn't take a lot of people to make something look much bigger than it is online.
- ‘War Dialing’ Tool Exposes Zoom’s Password Problems — Krebs on Security
The huge proliferation of Zoom usage has people exploiting weak defaults. Set a password for your Zoom meetings. Nothing complicated needed. Feel free to use "monkey123" or…
- 110 Nursing Homes Cut Off from Health Records in Ransomware Attack — Krebs on Security
This is a horrible example of the very real-world terrible things that can come without a focus on security.
- Spam In your Calendar? Here’s What to Do. — Krebs on Security
This is one of the most insidious forms of spamming that I see. Easy to follow directions for ways to limit the impact of this garbage. 😡
- Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years — Krebs on Security
You could definitely put this in the bucket of 'Hey, people make mistakes'. I would be surprised if Facebook engineers intentionally stored passwords in plain text, but this data…
- Payroll Provider Gives Extortionists a Payday — Krebs on Security
This is a very scary ransomware story. If you are in charge of a bunch of computers, you need to be thinking about ransomware.
- Marriott: Data on 500 Million Guests Stolen in 4-Year Breach — Krebs on Security
This is a giant and deep breach. Marriott said the breach involved unauthorized access to a database containing guest information tied to reservations made at Starwood properties…
- Google: Security Keys Neutralized Employee Phishing — Krebs on Security
I’m surprised to see Google doing this so broadly. Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it…
- Why Is Your Location Data No Longer Private? — Krebs on Security
This is a long article from Krebs but it’s a great read on the real world activity happening behind net neutrality. Additionally, I feel like legislative activity in this area…
- When Your Employees Post Passwords Online — Krebs on Security
Services that offer both private and public functions can easily leak private information out. KrebsOnSecurity spent the past week using Google to discover unprotected personal…
- Don’t Give Away Historic Details About Yourself — Krebs on Security
🔒 Interesting that bad actors are using silly social games to collect information on people that can then be combined with compromised passwords to answer security questions!…
- Ayuda! (Help!) Equifax Has My Data! — Krebs on Security
The findings in this Equifax breach continue to be fascinatingly bad! It took almost no time for them to discover that an online portal designed to let Equifax employees in…
- Equifax Breach Response Turns Dumpster Fire — Krebs on Security
More background from Brian Krebs on this massive data breach at Equifax. I cannot recall a previous data breach in which the breached company’s public outreach and response has…
- Twitter Bots Use Likes, RTs for Intimidation —Krebs on Security
Just another article that makes me really question why I bother with Twitter. Some layer of Twitter is a constant war of botnet's pretending to be people and influence people.…
- San Francisco Rail System Hacker Hacked —Krebs on Security “The San Francisco Municipal Transportation Agency (SFMTA) was hit with a ransomware attack on Friday, causing fare station terminals to carry the message, “You Hacked.”
- The Democratization of Censorship
John Gilmore, an American entrepreneur and civil libertarian, once famously quipped that
- FBI: $2.3 Billion Lost to CEO Email Scams —Krebs on Security
Amazing how effective this is.
- Sources: Security Firm Norse Corp. Imploding
Norse Corp., a Foster City, Calif. based cybersecurity firm that has attracted much attention from the news media and investors alike this past year, fired its chief executive…
- DHS Giving Firms Free Penetration Tests — Krebs on Security
The U.S. Department of Homeland Security (DHS) has been quietly launching stealthy cyber attacks against a range of private U.S. companies — mostly banks and energy firms. These…
- What’s in a Boarding Pass Barcode? A Lot
- Inside Target Corp., Days After 2013 Breach
- Ashley Madison Account Data Released by Hackers
- What’s Your Security Maturity Level? — Krebs on Security
Where does your organization fit in these models? Are they a useful way for getting a handle on security and increasing maturity within your organization? Has your employer…