Krebs – Computer Security Articles

Credit to Author: BrianKrebs| Date: Thu, 15 May 2025 19:56:51 +0000

In what experts are calling a novel legal outcome, the 22-year-old former administrator of the cybercrime community Breachforums will forfeit nearly $700,000 to settle a civil lawsuit from a health insurance company whose customer data was posted for sale on the forum in 2023. Conor Brian Fitzpatrick, a.k.a. “Pompompurin,” is slated for resentencing next month after pleading guilty to access device fraud and possession of child sexual abuse material (CSAM).

Independent Krebs

May 15, 2025 admin

Patch Tuesday, May 2025 Edition

Credit to Author: BrianKrebs| Date: Wed, 14 May 2025 11:57:48 +0000

Microsoft on Tuesday released software updates to fix at least 70 vulnerabilities in Windows and related products, including five zero-day flaws that are already seeing active exploitation. Adding to the sense of urgency with this month’s patch batch from Redmond are fixes for two other weaknesses that now have public proof-of-concept exploits available.

Independent Krebs

May 15, 2025 admin

Pakistani Firm Shipped Fentanyl Analogs, Scams to US

Credit to Author: BrianKrebs| Date: Wed, 07 May 2025 22:22:48 +0000

A Texas firm recently charged with conspiring to distribute synthetic opioids in the United States is at the center of a vast network of companies in the U.S. and Pakistan whose employees are accused of using online ads to scam westerners seeking help with trademarks, book writing, mobile app development and logo designs, a new investigation reveals.

Independent Krebs

May 15, 2025 admin

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs

Credit to Author: BrianKrebs| Date: Fri, 02 May 2025 00:52:00 +0000

A employee at Elon Musk’s artificial intelligence company xAI leaked a private key on GitHub that for the past two months could have allowed anyone to query private xAI large language models (LLMs) which appear to have been custom made for working with internal data from Musk’s companies, including SpaceX, Tesla and Twitter/X, KrebsOnSecurity has learned.

Independent Krebs

May 15, 2025 admin

Alleged ‘Scattered Spider’ Member Extradited to U.S.

Credit to Author: BrianKrebs| Date: Wed, 30 Apr 2025 21:54:59 +0000

A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft. U.S. prosecutors allege Tyler Robert Buchanan and co-conspirators hacked into dozens of companies in the United States and abroad, and that he personally controlled more than $26 million stolen from victims.

Independent Krebs

May 15, 2025 admin

DOGE Worker’s Code Supports NLRB Whistleblower

Credit to Author: BrianKrebs| Date: Wed, 23 Apr 2025 20:45:04 +0000

A whistleblower at the National Labor Relations Board (NLRB) alleged last week that denizens of Elon Musk’s Department of Government Efficiency (DOGE) siphoned gigabytes of data from the agency’s sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB downloaded three code repositories from GitHub. Further investigation into one of those code bundles shows it is remarkably similar to a program published in January 2025 by Marko Elez, a 25-year-old DOGE employee who has worked at a number of Musk’s companies.

Independent Krebs

May 15, 2025 admin

Whistleblower: DOGE Siphoned NLRB Case Data

Credit to Author: BrianKrebs| Date: Tue, 22 Apr 2025 01:48:27 +0000

A security architect with the National Labor Relations Board (NLRB) alleges that employees from Elon Musk’s Department of Government Efficiency (DOGE) transferred gigabytes of sensitive data from agency case files in early March, using short-lived accounts configured to leave few traces of network activity. The NLRB whistleblower said the unusual large data outflows coincided with multiple blocked login attempts from an Internet address in Russia that tried to use valid credentials for a newly-created DOGE user account.

Independent Krebs

May 15, 2025 admin

Funding Expires for Key Cyber Vulnerability Database

Credit to Author: BrianKrebs| Date: Wed, 16 Apr 2025 03:59:18 +0000

A critical resource that cybersecurity professionals worldwide rely on to identify, mitigate and fix security vulnerabilities in software and hardware is in danger of breaking down. The federally funded, non-profit research and development organization MITRE warned today that its contract to maintain the Common Vulnerabilities and Exposures (CVE) program — which is traditionally funded each year by the Department of Homeland Security — expires on April 16.