Computer Security Articles

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud providerSnowflake.Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing call and text history records of more than 100 million AT&T customers.A surveillance photo of Connor Riley Moucka, a.k.a. “Judische” and “Waifu,” dated Oct 21, 2024, 9 days before Mouck

Microsofttoday released updates to remedy at least 398 security vulnerabilities in itsWindowsoperating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.Image: Shutterstock, Mallika Home Studio.August’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking release ofmore than 570 security updates last month, but it is double June’s then-record batch ofnearly 200

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of large advertising platforms. Not anymore: A powerful and free new service calledDecryptAdsscrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities that a

Authorities in Australia have arrested two men believed to be members ofTeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever.Ina statementreleased today, theAustralian Federal Police(AFP) said two men from Western Australia, aged 21 and 23, were arrested in connection with a “sophisticated cybercrime syndicate that allegedly created malicious open-source software to rob thousands of global businesses.”The

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of theFederal Bureau of Investigation(FBI) today l

Microsoft Corp.today issued updates to plug at least 974 security holes in itsWindowsoperating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and deploying so many fixes each month.Image: Shutterstock.com, Kirill Makarov.This month’s patch bundle obl

The consumer data brokerRadaris.comhas long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey privacy law that provides for hefty fines against data brokers that publish personal information on state law enforcement officials. In the face of repeated stonewalling and prevarication by attorneys for Radaris, the judge in