Krebs – Page 2 – Computer Security Articles

Credit to Author: BrianKrebs| Date: Tue, 22 Apr 2025 01:48:27 +0000

A security architect with the National Labor Relations Board (NLRB) alleges that employees from Elon Musk’s Department of Government Efficiency (DOGE) transferred gigabytes of sensitive data from agency case files in early March, using short-lived accounts configured to leave few traces of network activity. The NLRB whistleblower said the unusual large data outflows coincided with multiple blocked login attempts from an Internet address in Russia that tried to use valid credentials for a newly-created DOGE user account.

Independent Krebs

May 15, 2025 admin

Funding Expires for Key Cyber Vulnerability Database

Credit to Author: BrianKrebs| Date: Wed, 16 Apr 2025 03:59:18 +0000

A critical resource that cybersecurity professionals worldwide rely on to identify, mitigate and fix security vulnerabilities in software and hardware is in danger of breaking down. The federally funded, non-profit research and development organization MITRE warned today that its contract to maintain the Common Vulnerabilities and Exposures (CVE) program — which is traditionally funded each year by the Department of Homeland Security — expires on April 16.

Independent Krebs

May 15, 2025 admin

Trump Revenge Tour Targets Cyber Leaders, Elections

Credit to Author: BrianKrebs| Date: Tue, 15 Apr 2025 03:27:51 +0000

President Trump last week revoked security clearances for Chris Krebs, the former director of the Cybersecurity and Infrastructure Security Agency (CISA) who was fired by Trump after declaring the 2020 election the most secure in U.S. history. The White House memo, which also suspended clearances for other security professionals at Krebs’s employer SentinelOne, comes as CISA is facing huge funding and staffing cuts.

Independent Krebs

May 15, 2025 admin

China-based SMS Phishing Triad Pivots to Banks

Credit to Author: BrianKrebs| Date: Thu, 10 Apr 2025 15:31:58 +0000

China-based purveyors of SMS phishing kits are enjoying remarkable success converting phished payment card data into mobile wallets from Apple and Google. Until recently, the so-called “Smishing Triad” mainly impersonated toll road operators and shipping companies. But experts say these groups are now directly targeting customers of international financial institutions, while dramatically expanding their cybercrime infrastructure and support staff.

Independent Krebs

May 15, 2025 admin

Patch Tuesday, April 2025 Edition

Credit to Author: BrianKrebs| Date: Wed, 09 Apr 2025 03:09:36 +0000

Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft’s most-dire “critical” rating, meaning malware or malcontents could exploit them with little to no interaction from Windows users.

Independent Krebs

March 6, 2025 admin

Who is the DOGE and X Technician Branden Spikes?

Credit to Author: BrianKrebs| Date: Fri, 07 Mar 2025 00:54:40 +0000

At 49, Branden Spikes isn’t just one of the oldest technologists who has been involved in Elon Musk’s Department of Government Efficiency (DOGE). As the current director of information technology at X/Twitter and an early hire at PayPal, Zip2, Tesla and SpaceX, Spikes is also among Musk’s most loyal employees. Here’s a closer look at this trusted Musk lieutenant, whose Russian ex-wife was once married to Elon’s cousin.

Independent Krebs

March 2, 2025 admin

Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab

Credit to Author: BrianKrebs| Date: Fri, 28 Feb 2025 20:14:58 +0000

One of the most notorious providers of abuse-friendly “bulletproof” web hosting for cybercriminals has started routing its operations through networks run by the Russian antivirus and security firm Kaspersky Lab, KrebsOnSecurity has learned.

Independent Krebs

March 2, 2025 admin

U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason”

Credit to Author: BrianKrebs| Date: Thu, 27 Feb 2025 03:39:25 +0000

A U.S. Army soldier who pleaded guilty last week to leaking phone records for high-ranking U.S. government officials searched online for non-extradition countries and for an answer to the question “can hacking be treason?” prosecutors in the case said Wednesday. The government disclosed the details in a court motion to keep the defendant in custody until he is discharged from the military.