The Coming Storm Archives

A Little Sunshine, Aisuru botnet, Akamai, booter, Breadcrumbs, CloudFlare, Damian Menscher, DDoS, DDoS-for-Hire, fbi, Forky, Internet of Things (IoT), Jigsaw, Kaike Southier Leite, Krebs, mirai, Ne'er-Do-Well News, News, Project Shield, QiAnXin XLab, Security, stresser, The Coming Storm, U.S. Department of Justice, yfork

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

Posted on 20 May, 2025 by [email protected]

20
May

KrebsOnSecurity last week was hit by a near record distributed denial-of-service (DDoS) attack that clocked in at more than 6.3 terabits of data per second (a terabit is one trillion bits of data). The brief attack appears to have been a test run for a massive new Internet of Things (IoT) botnet capable of launching […]

Continue reading →

Adam Barnett, CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709, Immersive Labs, Kev Breen, Krebs, Latest Warnings, Microsoft Patch Tuesday May 2025, News, Rapid7, Security, The Coming Storm, Time to Patch, Windows Common Log File System

Patch Tuesday, May 2025 Edition

Posted on 14 May, 2025 by [email protected]

14
May

Microsoft on Tuesday released software updates to fix at least 70 vulnerabilities in Windows and related products, including five zero-day flaws that are already seeing active exploitation. Adding to the sense of urgency with this month’s patch batch from Redmond are fixes for two other weaknesses that now have public proof-of-concept exploits available. Microsoft and […]

Continue reading →

A Little Sunshine, Carole Winqwist, Department of Government Efficiency, DOGE, Eric Fourrier, General Services Administration, GitGuardian, Github, Grok, GSAi, Krebs, Latest Warnings, News, Philippe Caturegli, Reuters, Security, Seralys, SpaceX, Tesla, The Coming Storm, The Washington Post, Twitter/X, xAI

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs

Posted on 1 May, 2025 by [email protected]

01
May

An employee at Elon Musk’s artificial intelligence company xAI leaked a private key on GitHub that for the past two months could have allowed anyone to query private xAI large language models (LLMs) which appear to have been custom made for working with internal data from Musk’s companies, including SpaceX, Tesla and Twitter/X, KrebsOnSecurity has learned. […]

Continue reading →

A Little Sunshine, async-ip-rotator, Browserless, Daniel J. Berulis, Department of Government Efficiency, Department of Health and Human Services, DOGE, Ge0rg3, Github, Integuru, Krebs, Labor Department, Marko Elez, National Labor Relations Board, News, Politico, Security, The Coming Storm, The Wall Street Journal

DOGE Worker’s Code Supports NLRB Whistleblower

Posted on 23 April, 2025 by [email protected]

23
Apr

A whistleblower at the National Labor Relations Board (NLRB) alleged last week that denizens of Elon Musk’s Department of Government Efficiency (DOGE) siphoned gigabytes of data from the agency’s sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB downloaded three code repositories from GitHub. Further investigation into one […]

Continue reading →

A Little Sunshine, amazon, Andrew P. Bakaj, CNN, Cybersecurity and Infrastructure Security Agency, Daniel J. Berulis, DOGE, Github, Krebs, Lasharn Hamilton, Latest Warnings, Microsoft Azure, News, NPR, NxGen, President Trump, Security, SpaceX, The Coming Storm, Tim Bearese, US-CERT

Whistleblower: DOGE Siphoned NLRB Case Data

Posted on 21 April, 2025 by [email protected]

21
Apr

A security architect with the National Labor Relations Board (NLRB) alleges that employees from Elon Musk‘s Department of Government Efficiency (DOGE) transferred gigabytes of sensitive data from agency case files in early March, using short-lived accounts configured to leave few traces of network activity. The NLRB whistleblower said the unusual large data outflows coincided with […]

Continue reading →

A Little Sunshine, Common Vulnerabilities and Exposures, Corellium, CVE, CVE Numbering Authorities, Krebs, Latest Warnings, Matt Tait, MITRE, News, Security, The Coming Storm

Funding Expires for Key Cyber Vulnerability Database

Posted on 15 April, 2025 by [email protected]

15
Apr

A critical resource that cybersecurity professionals worldwide rely on to identify, mitigate and fix security vulnerabilities in software and hardware is in danger of breaking down. The federally funded, non-profit research and development organization MITRE warned today that its contract to maintain the Common Vulnerabilities and Exposures (CVE) program — which is traditionally funded each […]

Continue reading →

A Little Sunshine, A.J. Vicens, Chris Krebs, Cyber Safety Review Board, Department of Government Efficiency, DOGE, Dustin Volz, Electronic Frontier Foundation, Gen. Timothy Haugh, Heritage Foundation, Iowa Secretary of State Paul Pate, Krebs, Latest Warnings, Martin Matishak, National Counterintelligence and Security Center, national security agency, Nevada Secretary of State Cisco Aguilar, News, Newsweek, Paul Rosenzweig, Pennsylvania Capital-Star, Raphael Satter, Reuters, Safeguard American Voter Eligibility Act (SAVE) Act, Secretary of the Commonwealth Al Schmidt, Security, Sen. Mark Warner, Sen. Ron Wyden, Suzanne Smalley, The Coming Storm, The Guardian, The Record, The Wall Street Journal, The Washington Post, U.S. Cyber Command, U.S. Election Assistance Commission, Wendy Noble

Trump Revenge Tour Targets Cyber Leaders, Elections

Posted on 14 April, 2025 by [email protected]

14
Apr

President Trump last week revoked security clearances for Chris Krebs, the former director of the Cybersecurity and Infrastructure Security Agency (CISA) who was fired by Trump after declaring the 2020 election the most secure in U.S. history. The White House memo, which also suspended clearances for other security professionals at Krebs’s employer SentinelOne, comes as […]

Continue reading →

A Little Sunshine, Citigroup, CSIS Security Group, Darcula, Ford Merrill, google android, imessage, Krebs, Latest Warnings, Lighthouse, mastercard, Ne'er-Do-Well News, News, Paypal, ProDaft, Resecurity, SecAlliance, Security, SilentPush, Smishing Triad, Stripe, The Coming Storm, Visa, Web Fraud 2.0, Xinxin Group, Z-NFC, Zach Edwards

China-based SMS Phishing Triad Pivots to Banks

Posted on 10 April, 2025 by [email protected]

10
Apr

China-based purveyors of SMS phishing kits are enjoying remarkable success converting phished payment card data into mobile wallets from Apple and Google. Until recently, the so-called “Smishing Triad” mainly impersonated toll road operators and shipping companies. But experts say these groups are now directly targeting customers of international financial institutions, while dramatically expanding their cybercrime […]

Continue reading →

Chris Goettl, CLFS, Common Log File System, CVE-2025-26671, CVE-2025-27480, CVE-2025-27482, CVE-2025-29824, Ivanti, Krebs, Latest Warnings, Microsoft, News, Satnam Narang, Security, Security Tools, The Coming Storm, Time to Patch, Windows, Windows Remote Desktop Services

Patch Tuesday, April 2025 Edition

Posted on 8 April, 2025 by [email protected]

08
Apr

Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft’s most-dire “critical” rating, meaning malware or malcontents could exploit them with little to no interaction from Windows users. The zero-day […]

Continue reading →

A Little Sunshine, Computer Forensic Services, fbi, Felician University, HarvardX, Kimberly Hanlon, Krebs, Mark Lanterman, mark rasch, News, Perkins Coie LLP, Sean Harrington, Security, Stephen Allwine, The Coming Storm, U.S. Secret Service, Unit 221B, Upsala College

Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe

Posted on 4 April, 2025 by [email protected]

04
Apr

A Minnesota cybersecurity and computer forensics expert whose testimony has featured in thousands of courtroom trials over the past 30 years is facing questions about his credentials and an inquiry from the Federal Bureau of Investigation (FBI). Legal experts say the inquiry could be grounds to reopen a number of adjudicated cases in which the […]

Continue reading →