follow
https://www.extrahop.com/resources/papers/zero-trust/?
follow
https://ninjio.com/lp46d-krebs/
follow
http://twitter.com/briankrebs
follow
https://krebsonsecurity.com/feed/
follow
https://www.linkedin.com/in/bkrebs/
follow
https://krebsonsecurity.com/
follow
http://twitter.com/briankrebs
follow
https://krebsonsecurity.com/feed/
follow
https://www.linkedin.com/in/bkrebs/
Skip to content
follow
#content
Home
follow
https://krebsonsecurity.com/
About the Author
follow
https://krebsonsecurity.com/about/
Advertising/Speaking
follow
https://krebsonsecurity.com/cpm/
‘Tis the Season for the Wayward Package Phish
follow
https://krebsonsecurity.com/2021/11/tis-the-season-for-the-wayward-package-phish/
20 Comments
follow
https://krebsonsecurity.com/2021/11/tis-the-season-for-the-wayward-package-phish/#comments
developer tools
follow
https://developer.mozilla.org/en-US/docs/Learn/Common_questions/What_are_browser_developer_tools
Continue reading →
follow
https://krebsonsecurity.com/2021/11/tis-the-season-for-the-wayward-package-phish/#more-57437
follow
https://www.akamai.com/blog/security/attacking-a-macro-security-problem-with-micro-segmentation?utm_source=krebsonsecurity&utm_medium=display&utm_id=GL_SecureWorkforce_Guardicore&utm_campaign=F-MC-52610&utm_content=Guardicore
The ‘Groove’ Ransomware Gang Was a Hoax
follow
https://krebsonsecurity.com/2021/11/the-groove-ransomware-gang-was-a-hoax/
6 Comments
follow
https://krebsonsecurity.com/2021/11/the-groove-ransomware-gang-was-a-hoax/#comments
a report
follow
https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/how-groove-gang-is-shaking-up-the-ransomware-as-a-service-market-to-empower-affiliates/
said
follow
https://www.fortinet.com/blog/psirt-blogs/malicious-actor-discloses-fortigate-ssl-vpn-credentials
Continue reading →
follow
https://krebsonsecurity.com/2021/11/the-groove-ransomware-gang-was-a-hoax/#more-57364
follow
https://www.akamai.com/why-akamai/the-internet-of-possibilities?utm_source=krebsonsecurity&utm_medium=display&utm_campaign=F-MC-54978
‘Trojan Source’ Bug Threatens the Security of All Code
follow
https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/
49 Comments
follow
https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/#comments
Unicode
follow
https://home.unicode.org/
Bidi” algorithm
follow
https://www.w3.org/International/articles/inline-bidi-markup/uba-basics
to disguise the file extensions of malware disseminated via email
follow
https://krebsonsecurity.com/2011/09/right-to-left-override-aids-email-attacks/
control characters
follow
https://en.wikipedia.org/wiki/Control_character
string literals
follow
https://www.ibm.com/docs/en/zos/2.3.0?topic=literals-string
Trojan Source
follow
https://www.trojansource.codes/
Matthew Green
follow
https://isi.jhu.edu/~mgreen/
Continue reading →
follow
https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/#more-57367
Zales.com Leaked Customer Data, Just Like Sister Firms Jared, Kay Jewelers Did in 2018
follow
https://krebsonsecurity.com/2021/10/zales-com-leaked-customer-data-just-like-sister-firms-jared-kay-jewelers-did-in-2018/
16 Comments
follow
https://krebsonsecurity.com/2021/10/zales-com-leaked-customer-data-just-like-sister-firms-jared-kay-jewelers-did-in-2018/#comments
fixed similar weaknesses with its Jared and Kay websites back in 2018
follow
https://krebsonsecurity.com/2018/12/jared-kay-jewelers-parent-fixes-data-leak/
Continue reading →
follow
https://krebsonsecurity.com/2021/10/zales-com-leaked-customer-data-just-like-sister-firms-jared-kay-jewelers-did-in-2018/#more-57314
FBI Raids Chinese Point-of-Sale Giant PAX Technology
follow
https://krebsonsecurity.com/2021/10/fbi-raids-chinese-point-of-sale-giant-pax-technology/
161 Comments
follow
https://krebsonsecurity.com/2021/10/fbi-raids-chinese-point-of-sale-giant-pax-technology/#comments
PAX Technology Inc.
follow
https://www.pax.us/
reported
follow
https://www.wokv.com/news/local/fbi-jacksonville-homeland-security-agents-investigating-outside-southside-business/BVFSPMUVUJHWRJTX56PSQDXAZ4/
Continue reading →
follow
https://krebsonsecurity.com/2021/10/fbi-raids-chinese-point-of-sale-giant-pax-technology/#more-57313
Conti Ransom Gang Starts Selling Access to Victims
follow
https://krebsonsecurity.com/2021/10/conti-ransom-gang-starts-selling-access-to-victims/
13 Comments
follow
https://krebsonsecurity.com/2021/10/conti-ransom-gang-starts-selling-access-to-victims/#comments
reported
follow
https://www.reuters.com/technology/exclusive-governments-turn-tables-ransomware-gang-revil-by-pushing-it-offline-2021-10-21/
REvil
follow
https://krebsonsecurity.com/?s=REvil
Continue reading →
follow
https://krebsonsecurity.com/2021/10/conti-ransom-gang-starts-selling-access-to-victims/#more-57318
Missouri Governor Vows to Prosecute St. Louis Post-Dispatch for Reporting Security Vulnerability
follow
https://krebsonsecurity.com/2021/10/missouri-governor-vows-to-prosecute-st-louis-post-dispatch-for-reporting-security-vulnerability/
170 Comments
follow
https://krebsonsecurity.com/2021/10/missouri-governor-vows-to-prosecute-st-louis-post-dispatch-for-reporting-security-vulnerability/#comments
says it discovered the vulnerability
follow
https://www.stltoday.com/news/local/education/missouri-teachers-social-security-numbers-at-risk-on-state-agencys-website/article_f3339700-ece0-54a1-9a45-f300321b7c82.html
a press conference Thursday morning
follow
https://www.facebook.com/GovMikeParson/posts/423299439166539?__cft__[0]=AZXNI01wklrX2Oe-kp7o9pO2cBw3Q41HUh5-OvJQXcZIx4VnxVQqqwUf83qHu0QDdqjHgTOSnafkQszwbzL_K6iRLkzPQjNlxejwqndYMo6NIQj8r6XjA1vbHurTL8r_LEP0laetGnY23IXyCJQHLJE1&__tn__=%2CO%2CP-R
Continue reading →
follow
https://krebsonsecurity.com/2021/10/missouri-governor-vows-to-prosecute-st-louis-post-dispatch-for-reporting-security-vulnerability/#more-57293
How Coinbase Phishers Steal One-Time Passwords
follow
https://krebsonsecurity.com/2021/10/how-coinbase-phishers-steal-one-time-passwords/
29 Comments
follow
https://krebsonsecurity.com/2021/10/how-coinbase-phishers-steal-one-time-passwords/#comments
Hold Security
follow
http://www.holdsecurity.com
Continue reading →
follow
https://krebsonsecurity.com/2021/10/how-coinbase-phishers-steal-one-time-passwords/#more-57245
Patch Tuesday, October 2021 Edition
follow
https://krebsonsecurity.com/2021/10/patch-tuesday-october-2021-edition/
16 Comments
follow
https://krebsonsecurity.com/2021/10/patch-tuesday-october-2021-edition/#comments
writes
follow
https://www.bleepingcomputer.com/news/security/emergency-apple-ios-1502-update-fixes-zero-day-used-in-attacks/
Saar Amar
follow
https://twitter.com/AmarSaar
technical writeup and proof-of-concept exploit
follow
https://saaramar.github.io/IOMFB_integer_overflow_poc/
make sure it’s up to date with the latest security patches
follow
https://support.apple.com/en-ca/HT204204
Microsoft Word
follow
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40486
CVE-2021-38672
follow
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38672
CVE-2021-40461
follow
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40461
CVE-2021-40449
follow
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40449
CVE-2021-36970
follow
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36970
to issue an emergency security update back in July
follow
https://krebsonsecurity.com/2021/07/microsoft-issues-emergency-patch-for-windows-flaw/
Continue reading →
follow
https://krebsonsecurity.com/2021/10/patch-tuesday-october-2021-edition/#more-57264
What Happened to Facebook, Instagram, & WhatsApp?
follow
https://krebsonsecurity.com/2021/10/what-happened-to-facebook-instagram-whatsapp/
132 Comments
follow
https://krebsonsecurity.com/2021/10/what-happened-to-facebook-instagram-whatsapp/#comments
Kentik
follow
https://www.kentik.com/analysis/facebook-suffers-global-outage/
tweeted
follow
https://twitter.com/RMac18/status/1445069187664293895
a much-anticipated interview
follow
https://www.cbsnews.com/news/facebook-whistleblower-frances-haugen-misinformation-public-60-minutes-2021-10-03/
tweeted
follow
https://twitter.com/sheeraf/status/1445099150316503057
a tweet
follow
https://twitter.com/Facebook/status/1445155265360416773
This fascinating thread on Hacker News
follow
https://news.ycombinator.com/item?id=28750930
Packet Clearing House
follow
https://ww.pch.net
said
follow
https://twitter.com/woodyatpch/status/1445176218236579843
a detailed and somewhat technical writeup
follow
https://blog.cloudflare.com/october-2021-facebook-outage/
a blog post
follow
https://engineering.fb.com/2021/10/04/networking-traffic/outage/
2
follow
https://krebsonsecurity.com/page/2/
3
follow
https://krebsonsecurity.com/page/3/
4
follow
https://krebsonsecurity.com/page/4/
Next ›
follow
https://krebsonsecurity.com/page/2/
Last »
follow
https://krebsonsecurity.com/page/208/
follow
https://www.cybereason.com/live-attack-simulation-08-05-21?utm_source=krebs&utm_medium=display&utm_campaign=q4
follow
https://www.akamai.com/why-akamai/the-internet-of-possibilities?utm_source=krebsonsecurity&utm_medium=display&utm_campaign=F-MC-54978
Subscribe here
follow
/subscribe/
‘Tis the Season for the Wayward Package Phish
follow
https://krebsonsecurity.com/2021/11/tis-the-season-for-the-wayward-package-phish/
The ‘Groove’ Ransomware Gang Was a Hoax
follow
https://krebsonsecurity.com/2021/11/the-groove-ransomware-gang-was-a-hoax/
‘Trojan Source’ Bug Threatens the Security of All Code
follow
https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/
Zales.com Leaked Customer Data, Just Like Sister Firms Jared, Kay Jewelers Did in 2018
follow
https://krebsonsecurity.com/2021/10/zales-com-leaked-customer-data-just-like-sister-firms-jared-kay-jewelers-did-in-2018/
FBI Raids Chinese Point-of-Sale Giant PAX Technology
follow
https://krebsonsecurity.com/2021/10/fbi-raids-chinese-point-of-sale-giant-pax-technology/
follow
https://www.amazon.com/Spam-Nation-Organized-Cybercrime-Epidemic-ebook/dp/B00L5QGBL0/ref=dp_kinw_strp_1
follow
https://krebsonsecurity.com/2020/07/thinking-of-a-cybersecurity-career-read-this/
follow
https://krebsonsecurity.com/all-about-skimmers/
A Little Sunshine
follow
https://krebsonsecurity.com/category/sunshine/
All About Skimmers
follow
https://krebsonsecurity.com/category/all-about-skimmers/
Ashley Madison breach
follow
https://krebsonsecurity.com/category/ashley-madison-breach/
Breadcrumbs
follow
https://krebsonsecurity.com/category/breadcrumbs/
Data Breaches
follow
https://krebsonsecurity.com/category/data-breaches/
DDoS-for-Hire
follow
https://krebsonsecurity.com/category/ddos-for-hire/
Employment Fraud
follow
https://krebsonsecurity.com/category/employment-fraud/
How to Break Into Security
follow
https://krebsonsecurity.com/category/how-to-break-into-security/
Latest Warnings
follow
https://krebsonsecurity.com/category/latest-warnings/
Ne"er-Do-Well News
follow
https://krebsonsecurity.com/category/neer-do-well-news/
Other
follow
https://krebsonsecurity.com/category/other/
Pharma Wars
follow
https://krebsonsecurity.com/category/pharma-wars/
Ransomware
follow
https://krebsonsecurity.com/category/ransomware/
Security Tools
follow
https://krebsonsecurity.com/category/security-tools/
SIM Swapping
follow
https://krebsonsecurity.com/category/sim-swapping/
Spam Nation
follow
https://krebsonsecurity.com/category/spam-nation/
Target: Small Businesses
follow
https://krebsonsecurity.com/category/smallbizvictims/
Tax Refund Fraud
follow
https://krebsonsecurity.com/category/tax-refund-fraud/
The Coming Storm
follow
https://krebsonsecurity.com/category/comingstorm/
Time to Patch
follow
https://krebsonsecurity.com/category/patches/
Web Fraud 2.0
follow
https://krebsonsecurity.com/category/web-fraud-2-0/
follow
https://krebsonsecurity.com/2012/10/the-scrap-value-of-a-hacked-pc-revisited/
follow
https://krebsonsecurity.com/2013/06/the-value-of-a-hacked-email-account/
follow
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=MCCRKHWRX57HS
Sextortion Scam Uses Recipient"s Hacked Passwords
follow
https://krebsonsecurity.com/2018/07/sextortion-scam-uses-recipients-hacked-passwords/
Online Cheating Site AshleyMadison Hacked
follow
https://krebsonsecurity.com/2015/07/online-cheating-site-ashleymadison-hacked/
Sources: Target Investigating Data Breach
follow
https://krebsonsecurity.com/2013/12/sources-target-investigating-data-breach/
Trump Fires Security Chief Christopher Krebs
follow
https://krebsonsecurity.com/2020/11/trump-fires-security-chief-christopher-krebs/
Cards Stolen in Target Breach Flood Underground Markets
follow
https://krebsonsecurity.com/2013/12/cards-stolen-in-target-breach-flood-underground-markets/
Reports: Liberty Reserve Founder Arrested, Site Shuttered
follow
https://krebsonsecurity.com/2013/05/reports-liberty-reserve-founder-arrested-site-shuttered/
Was the Ashley Madison Database Leaked?
follow
https://krebsonsecurity.com/2015/08/was-the-ashley-madison-database-leaked/
DDoS-Guard To Forfeit Internet Space Occupied by Parler
follow
https://krebsonsecurity.com/2021/01/ddos-guard-to-forfeit-internet-space-occupied-by-parler/
True Goodbye: "Using TrueCrypt Is Not Secure"
follow
https://krebsonsecurity.com/2014/05/true-goodbye-using-truecrypt-is-not-secure/
Who Hacked Ashley Madison?
follow
https://krebsonsecurity.com/2015/08/who-hacked-ashley-madison/
follow
https://krebsonsecurity.com/2017/06/why-so-many-top-hackers-hail-from-russia/
follow
https://krebsonsecurity.com/category/web-fraud-2-0/
follow
https://krebsonsecurity.com/2014/03/are-credit-monitoring-services-worth-it/
follow
https://krebsonsecurity.com/2014/05/antivirus-is-dead-long-live-antivirus/
follow
https://krebsonsecurity.com/category/tax-refund-fraud/
follow
https://krebsonsecurity.com/2014/06/peek-inside-a-professional-carding-shop/
follow
https://krebsonsecurity.com/2013/09/crooks-hijack-retirement-funds-via-ssa-portal/
follow
https://krebsonsecurity.com/2015/01/how-was-your-credit-card-stolen/
follow
https://krebsonsecurity.com/2011/05/krebss-3-basic-rules-for-online-safety/