Many Public Salesforce Sites are Leaking Private Data
A shocking number of organizations — including banks and healthcare providers — are leaking private and sensitive information from their public Sale... Read more
Attackers using Google Ads to distribute Bumblebee malware
Security Researchers found a new malware called Bumblebee malware that targets users through Google Ads. Bumblebee is a malware loader discovered in... Read more
3CX Breach Was a Double Supply Chain Compromise
We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX , a complex, lengthy intrusion t... Read more
Giving a Face to the Malware Proxy Service ‘Faceless’
For the past seven years, a malware-based proxy service known as “ Faceless ” has sold anonymity to countless cybercriminals. For less than a dollar... Read more
Why is ‘Juice Jacking’ Suddenly Back in the News?
KrebsOnSecurity received a nice bump in traffic this week thanks to tweets from the Federal Bureau of Investigation (FBI) and the Federal Communic... Read more
Microsoft (& Apple) Patch Tuesday, April 2023 Edition
Microsoft today released software updates to plug 100 security holes in its Windows operating systems and other software, including a zero-day vu... Read more
Cyber Attack on Indian Health Ministry Website
During March 2023, a group of Russian hackers cyber-attacked the official website of the Indian Health Ministry in a bid to grab confidential informa... Read more
FBI Seizes Bot Shop ‘Genesis Market’ Amid Arrests Targeting Operators, Suppliers
Several domain names tied to Genesis Market , a bustling cybercrime store that sold access to passwords and other data stolen from millions of compu... Read more
A Serial Tech Investment Scammer Takes Up Coding?
John Clifton Davies , a 60-year-old con man from the United Kingdom who fled the country in 2015 before being sentenced to 12 years in prison for fr... Read more
German Police Raid DDoS-Friendly Host ‘FlyHosting’
Authorities in Germany this week seized Internet servers that powered FlyHosting , a dark web offering that catered to cybercriminals operating DDoS... Read more
UK Sets Up Fake Booter Sites To Muddy DDoS Market
The United Kingdom’s National Crime Agency (NCA) has been busy setting up phony DDoS-for-hire websites that seek to collect information on users, r... Read more
Google Suspends Chinese E-Commerce App Pinduoduo Over Malware
Google says it has suspended the app for the Chinese e-commerce giant Pinduoduo after malware was found in versions of the app. The move comes ju... Read more
-
Late last year, security researchers made a startling discovery: Kremlin-backed…
