The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45 of the world’s top 50 banks, notified customers of the security incident after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen […]
Category Archives: The Coming Storm
Auto Added by WPeMatico
09
Nov
Nov
The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based technology companies. In an alert (PDF) published this week, the FBI […]
01
Nov
Nov
A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We’ll also explore an array of cybercrime services aimed at phishers who target hotels that rely on the […]
AlphV, Anthem Inc., BlackCat, Data Breaches, Equifax, Experian, HIPAA Journal, IDX, Krebs, Latest Warnings, News, RansomHub, Security, Sen. Mark Warner, Sen. Ron Wyden, The Coming Storm, TransUnion, U.S. Department of Health and Human Resources, United Health Group
Change Healthcare Breach Hits 100M Americans
30
Oct
Oct
Change Healthcare says it has notified approximately 100 million Americans that their personal, financial and healthcare records may have been stolen in a February 2024 ransomware attack that caused the largest ever known data breach of protected health information. Image: Tamer Tuncay, Shutterstock.com. A ransomware attack at Change Healthcare in the third week of February […]
A Little Sunshine, AccuWeather, Adx, Android Advertising ID, App Tracking Transparency, apple, Associated Press, bid request, BR24, Daniel's Law, Electronic Frontier Foundation, Eva Galperin, Fog Reveal, GasBuddy, Google, Grindr, Identifier for Advertisers, Judge Andrew F. Wilkinson Judicial Security Act, Justin Sherman, Justyna Maloney, Krebs, Latest Warnings, Macy's, MAID, mobile advertising ID, MyFitnessPal, netzpolitik.org, News, Scott Maloney, Security, Sen. Ron Wyden, SilentPush, Tangles, The Coming Storm, Troutman Pepper, U.S. Securities and Exchange Commission, WebLoc, Zach Edwards
The Global Surveillance Free-for-All in Mobile Ad Data
23
Oct
Oct
Not long ago, the ability to digitally track someone’s daily movements just by knowing their home address, employer, or place of worship was considered a dangerous power that should remain only within the purview of nation states. But a new lawsuit in a likely constitutional battle over a New Jersey privacy law shows that anyone […]
A Little Sunshine, alex holden, Arpa Plus, briansclub, Chainanlysis, Cryptex, CS Proxy Solutions CY, Dark Angels, Financial Crimes Enforcement Network, Hold Security, Home Depot breach, Joker's stash, Krebs, Liberty Reserve, Mazafaka, Ne'er-Do-Well News, News, Novaya Gazeta, Orbest Investments LP, Organized Crime and Corruption Project, Perfect Money, PinPays, pm2btc, Progate Solutions, Rich Sanders, RM Everton Ltd, Security, Sergey Sergeevich Ivanov, Sergey Sergeevich Omelnitskii, Taleon, target breach, The Coming Storm, The Laundromat, Timur Kamilevich Shakhmametov, U.S. Department of Justice, UAPS, Universal Anonymous Payment System, unlimited cashouts, v1pee, Vega, Web Fraud 2.0
U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex
26
Sep
Sep
The United States today unveiled sanctions and indictments against the alleged proprietor of Joker’s Stash, a now-defunct cybercrime store that peddled tens of millions of payment cards stolen in some of the largest data breaches of the past decade. The government also indicted and sanctioned a top Russian cybercriminal known as Taleon, whose cryptocurrency exchange […]
A Little Sunshine, Black Lotus Labs, Bronze Silhouette, Christopher Wray, CVE-2024-39717, Cybersecurity & Infrastructure Security Agency, Federal Bureau of Investigation, Insidious Taurus, Internet of Things (IoT), Krebs, KV-botnet, Latest Warnings, Lumen Technologies, Michael Horka, national security agency, News, Ryan English, Security, The Coming Storm, U.S. Department of Justice, Versa Director 22.1.4, Volt Typhoon
New 0-Day Attacks Linked to China’s ‘Volt Typhoon’
27
Aug
Aug
Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on infiltrating critical U.S. networks and laying the groundwork for the ability to disrupt communications between the United States […]
A Little Sunshine, Active Directory, Andorra, DNS name devolution, Krebs, Latest Warnings, Memphis Real-Time Crime Center, memrtcc.ad, Mike Barlow, Mike O'Connor, namespace collision, News, Philippe Caturegli, Security, Seralys, The Coming Storm, Web Fraud 2.0, Web Proxy Auto-Discovery Protocol, wpad.ad, wpad.dk
Local Networks Go Global When Domain Names Collide
23
Aug
Aug
The proliferation of new top-level domains (TLDs) has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn’t exist at the time. Meaning, they are continuously sending their Windows usernames and passwords to domain names they do not control and which are […]
19
Aug
Aug
New details are emerging about a breach at National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone numbers online. KrebsOnSecurity has learned that another NPD data broker which shares access to the same consumer records inadvertently published the passwords to its back-end […]
A Little Sunshine, Atlas Data Privacy Corp., Data Breaches, fbi, HaveIBeenPwned.com, InfraGard, Instant Checkmate, Jerico Pictures, Krebs, National Criminal Data LLC, National Public Data breach, News, PeopleConnect, recordscheck.net, Sal Verini, Salvatore Verini, Security, Shadowglade LLC, SXUL, The Coming Storm, Trinity Entertainment, Troy Hunt, TruthFinder, Twisted History LLC, USDoD, VX-Underground
NationalPublicData.com Hack Exposes a Nation’s Data
15
Aug
Aug
A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a little-known but aptly-named consumer data broker called NationalPublicData.com. This post examines what we know about a breach that has exposed hundreds of millions of consumer records. We’ll also […]
- 1
- 2