Krebs

Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of the proxy services is a Russian company whose founder’s web hosting business was ground zero for cyberattacks against election systems in Arizona and Illinois in 2016.The security firmLayer3 Intelsaid it detected multiple residential proxy nodes beaconing out from the internet addr

Googlesaid today it worked with industry partners to dismantle a botnet made up of more than 1.3 millionAndroidTV set-top boxes that ship with malicious software which secretly rents the user’s Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet’s access to more than 10 million additional compromised systems, including other Internet of Things (IoT) products such as Android-based healthcare devices and

Expect to see quite a few websites serving error pages today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being exploited in the wild.Image: Shutterstock.com, Sashkin.The flaws at issue are present inPHP, the programming language that powers sites running on a large number of web pu

U.S. federal investigators pursuing theShinyHuntershacking group that recently stole highly sensitive data from theFBIhave identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.Hackers aligned with ShinyHunters have claim

The United Kingdom has issued economic sanctions againstCryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions.Heleket’s support agent on Telegram claims, despite all evidence to the contrary, that it is not affiliated with Cryptomus. Image: Richard Sanders.On October 8, the U.K.issued sanctions(PDF)

Microsofttoday issued updates to fix more than 1,400 security vulnerabilities in itsWindowsoperating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.Just one of the weaknesses patched this week is considered a “zero day,” or already exploited in the wild.CVE-2026-96951is a security feature bypass in theWindows Shellthat affects Windows 10 and 11 systems, as well as s

Agents with theFederal Bureau of Investigation(FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into theShinyHuntershacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity.The New York Timesreported todaythat the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters. The Times story did not identify the man, nor dida statementon Twitte

A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion groupShinyHuntershas been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle “Rey,” was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace companyBoeing, which manufactures the fleet of planes used by the employer of Rey’s fat