Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November’s patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed prior to today. The zero-day flaw tracked as CVE-2024-49039 is […]
Category Archives: Krebs
Category Added in a WPeMatico Campaign
09
Nov
Nov
The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based technology companies. In an alert (PDF) published this week, the FBI […]
A Little Sunshine, Advance Auto Parts, Alexander Antonin Moucka, AT&T breach, Atomwaffen Division, Austin Larsen, Bharat Sanchar Nigam Ltd, Breadcrumbs, Connor Riley Moucka, Court, IntelSecrets, IRDev, John Erin Binns, Judische, Kiberphant0m, Krebs, Leak Society, Lending Tree, Mandiant, Ne'er-Do-Well News, News, RapeLash, Satori, Security, SIM Swapping, Snowflake, Ticketmaster, UNC5537, Verizon, Waifu
Canadian Man Arrested in Snowflake Data Extortions
05
Nov
Nov
A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. Image: https://www.pomerium.com/blog/the-real-lessons-from-the-snowflake-breach On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first […]
01
Nov
Nov
A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We’ll also explore an array of cybercrime services aimed at phishers who target hotels that rely on the […]
AlphV, Anthem Inc., BlackCat, Data Breaches, Equifax, Experian, HIPAA Journal, IDX, Krebs, Latest Warnings, News, RansomHub, Security, Sen. Mark Warner, Sen. Ron Wyden, The Coming Storm, TransUnion, U.S. Department of Health and Human Resources, United Health Group
Change Healthcare Breach Hits 100M Americans
30
Oct
Oct
Change Healthcare says it has notified approximately 100 million Americans that their personal, financial and healthcare records may have been stolen in a February 2024 ransomware attack that caused the largest ever known data breach of protected health information. Image: Tamer Tuncay, Shutterstock.com. A ransomware attack at Change Healthcare in the third week of February […]
A Little Sunshine, AccuWeather, Adx, Android Advertising ID, App Tracking Transparency, apple, Associated Press, bid request, BR24, Daniel's Law, Electronic Frontier Foundation, Eva Galperin, Fog Reveal, GasBuddy, Google, Grindr, Identifier for Advertisers, Judge Andrew F. Wilkinson Judicial Security Act, Justin Sherman, Justyna Maloney, Krebs, Latest Warnings, Macy's, MAID, mobile advertising ID, MyFitnessPal, netzpolitik.org, News, Scott Maloney, Security, Sen. Ron Wyden, SilentPush, Tangles, The Coming Storm, Troutman Pepper, U.S. Securities and Exchange Commission, WebLoc, Zach Edwards
The Global Surveillance Free-for-All in Mobile Ad Data
23
Oct
Oct
Not long ago, the ability to digitally track someone’s daily movements just by knowing their home address, employer, or place of worship was considered a dangerous power that should remain only within the purview of nation states. But a new lawsuit in a likely constitutional battle over a New Jersey privacy law shows that anyone […]
18
Oct
Oct
Brazilian authorities reportedly have arrested a 33-year-old man on suspicion of being “USDoD,” a prolific cybercriminal who rose to infamy in 2022 after infiltrating the FBI’s InfraGard program and leaking contact information for 80,000 members. More recently, USDoD was behind a breach at the consumer data broker National Public Data that led to the leak […]
17
Oct
Oct
The U.S. government on Wednesday announced the arrest and charging of two Sudanese brothers accused of running Anonymous Sudan (a.k.a. AnonSudan), a cybercrime business known for launching powerful distributed denial-of-service (DDoS) attacks against a range of targets, including dozens of hospitals, news websites and cloud providers. The younger brother is facing charges that could land […]
A Little Sunshine, Angel "Chi Chi" Borrero, AnyDesk, Breadcrumbs, gemini, Jeandiel "Box" Serrano, Krebs, Malone "Greavys" Lam, Ne'er-Do-Well News, News, Pantic, Reynaldo "Rey" Diaz, Security, SIM Swapping, Swag, The Com, Veer Chetal, Web Fraud 2.0, Wiz, ZachXBT
Lamborghini Carjackers Lured by $243M Cyberheist
09
Oct
Oct
The parents of a 19-year-old Connecticut honors student accused of taking part in a $243 million cryptocurrency heist in August were carjacked a week later — while out house-hunting in a brand new Lamborghini. Prosecutors say the couple was beaten and briefly kidnapped by six young men who traveled from Florida as part of a […]
.NET, adobe, Adobe Framemaker, Adobe Substance 3D Painter, Animate, apple, Azure, Commerce, CVE-2024-43572, CVE-2024-43573, Dimension, Elastic Security Labs, GrimResource, Immersive Labs, InCopy, InDesign, Krebs, Latest Warnings, Lightroom, macOS 15, MSHTML, News, Nikolas Cemerikic, Office, OpenSSH for Windows; Power BI; Windows Hyper-V; Windows Mobile Broadband, Satnam Narang, Security, Security Tools, Sequoia, Substance 3D Stager, Tenable, Time to Patch, Visual Studio
Patch Tuesday, October 2024 Edition
08
Oct
Oct
Microsoft today released security updates to fix at least 117 security holes in Windows computers and other software, including two vulnerabilities that are already seeing active attacks. Also, Adobe plugged 52 security holes across a range of products, and Apple has addressed a bug in its new macOS 15 “Sequoia” update that broke many cybersecurity […]